Vulnerabilities (CVE)

Filtered by vendor Citadel Subscribe
Filtered by product Webcit
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-3821 1 Citadel 1 Webcit 2018-10-15 7.5 HIGH N/A
Cross-site request forgery (CSRF) vulnerability in Webcit before 7.11 allows remote attackers to modify configurations and perform other actions as arbitrary users via unspecified vectors.
CVE-2007-3822 1 Citadel 1 Webcit 2018-10-15 2.6 LOW N/A
Multiple cross-site scripting (XSS) vulnerabilities in Webcit before 7.11 allow remote attackers to inject arbitrary web script or HTML via (1) the who parameter to showuser; and other vectors involving (2) calendar mode, (3) bulletin board mode, (4) room names, and (5) uploaded file names.
CVE-2009-0364 1 Citadel 1 Webcit 2009-04-02 7.5 HIGH N/A
Format string vulnerability in the mini_calendar component in Citadel.org WebCit 7.22, and other versions before 7.39, allows remote attackers to execute arbitrary code via unspecified vectors.