| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2019-0186 | 4.3 |
The input fields of the Apache Pluto "Chat Room" demo portlet 3.0.0 and 3.0.1 are vulnerable to Cross-Site Scripting (XSS) attacks. Mitigation: * Uninstall the ChatRoomDemo war file - or - * migrate to version 3.1.0 of the chat-room-demo war file
|
29-04-2019 - 13:12 | 26-04-2019 - 16:29 | |
| CVE-2008-4644 | 7.5 |
hits.php in myWebland myStats allows remote attackers to bypass IP address restrictions via a modified X-Forwarded-For HTTP header.
|
29-09-2017 - 01:32 | 22-10-2008 - 00:11 | |
| CVE-2008-4643 | 7.5 |
SQL injection vulnerability in hits.php in myWebland myStats allows remote attackers to execute arbitrary SQL commands via the sortby parameter.
|
29-09-2017 - 01:32 | 22-10-2008 - 00:11 |