Javier Bassi

#19309of 60,572
16.1Total CVSS
Vulnerabilities · 3
Medium
3
PT-2011-3495
2011-06-06
5.0
CVE-2011-1952
Unknown
Post Revolution
The issue allows remote attackers to cause a denial of service, specifically an infinite loop, by providing malformed HTML markup. This can be achieved with a sequence such as `a<`.
PT-2011-3496
2011-06-06
4.3
CVE-2011-1953
Unknown
Post Revolution
The issue allows remote attackers to inject arbitrary web script or HTML via attributes of various HTML elements, including `P`, `STRONG`, `A`, `EM`, `I`, `IMG`, `LI`, `OL`, `VIDEO`, and `BLOCKQUOTE`.
PT-2011-3497
2011-06-06
6.8
CVE-2011-1954
Unknown
Post Revolution
The issue allows remote attackers to hijack the authentication of arbitrary users for requests to specific API endpoints, including "ajax-weblog-guardar.php", "verpost.php", "comments.php", and "perfil.php".