| CVE-2012-6132 |
medium |
— |
4.3 |
|
|
|
4y ago |
Cross-site scripting (XSS) vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the otk parameter. |
| CVE-2014-6276 |
medium |
4.3 |
4.3 |
|
|
|
10y ago |
schema.py in Roundup before 1.5.1 does not properly limit attributes included in default user permissions, which might allow remote authenticated users to obtain sensitive user information by viewing… |
| CVE-2012-6131 |
medium |
— |
4.3 |
|
|
|
12y ago |
Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the @action parameter to support/issue1. |
| CVE-2012-6130 |
medium |
— |
4.3 |
|
|
|
12y ago |
Cross-site scripting (XSS) vulnerability in the history display in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via a username, related to generating a link. |
| CVE-2010-2491 |
medium |
— |
4.3 |
|
|
|
16y ago |
Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the template argument to the /issue program. |