Vulnerabilities (CVE)

Filtered by vendor Codiad Subscribe
Filtered by product Codiad
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-7257 1 Codiad 1 Codiad 2017-08-29 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Codiad 2.0.7 allows remote attackers to inject arbitrary web script or HTML via the Project Name field.
CVE-2014-9581 1 Codiad 1 Codiad 2015-01-11 5.0 MEDIUM N/A
Directory traversal vulnerability in components/filemanager/download.php in Codiad 2.4.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter. NOTE: this issue was originally incorrectly mapped to CVE-2014-1137; see CVE-2014-1137 for more information.
CVE-2014-9582 1 Codiad 1 Codiad 2015-01-11 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in components/filemanager/dialog.php in Codiad 2.4.3 allows remote attackers to inject arbitrary web script or HTML via the short_name parameter in a rename action. NOTE: this issue was originally incorrectly mapped to CVE-2014-1137; see CVE-2014-1137 for more information.