Vulnerabilities (CVE)

Filtered by vendor Status Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-4137 1 Status 1 Statusnet 2013-10-15 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in StatusNet 1.0 before 1.0.2 and 1.1.0 allow remote attackers to execute arbitrary SQL commands via vectors related to user lists and "a particular tag format."
CVE-2011-3802 1 Status 1 Statusnet 2012-05-21 5.0 MEDIUM N/A
StatusNet 0.9.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tpl/index.php and certain other files.