Mike Manzotti

#14525of 60,574
21.8Total CVSS
Vulnerabilities · 4
Low
1
Medium
2
High
1
PT-2014-6388
2014-10-20
3.5
CVE-2014-5276
Pro Chat Rooms
Pro Chat Rooms Text Chat Rooms
The issue allows remote authenticated users to inject arbitrary web script or HTML, which can lead to cross-site scripting (XSS) attacks. This can be achieved via two methods: (1) uploading a malicious profile picture or (2) manipulating the `edit` parameter in the `profiles/index.php` API endpoint.
PT-2014-6331
2014-08-07
7.5
CVE-2014-5192
Sphider
Sphider
A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `filter` parameter in the "admin/admin.php" endpoint.
PT-2014-6332
2014-08-07
4.3
CVE-2014-5193
Sphider
Sphider
A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the `category` parameter in the admin/admin.php file.
PT-2014-6333
2014-08-07
6.5
CVE-2014-5194
Sphider
Sphider
A static code injection issue allows remote authenticated users to inject arbitrary PHP code into settings/conf.php via the ` word upper bound` parameter in admin/admin.php.