Open Source Development Network - vulnerabilities (CVEs)

6 CVEs in 1 products, 0 in the last 30 days, newest from 2004-12-31.

Products

CVE-2004-2656 - CVSS 4.3 (medium), 2004-12-31: Multiple cross-site scripting (XSS) vulnerabilities in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) before R_2_5_0_41 allow remote…
CVE-2002-1748 - CVSS 7.2 (high), 2002-12-31: Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to gain access to arbitrary accounts.
CVE-2002-1681 - CVSS 6.8 (medium), 2002-12-31: Cross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002 allows remote attackers to execute arbitrary script as other…
CVE-2002-0292 - CVSS 2.6 (low), 2002-05-31: Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and authentication…
CVE-2001-1535 - CVSS 4.6 (medium), 2001-12-31: Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtain session ID's from cookies and gain…
CVE-2000-1015 - CVSS 7.5 (high), 2000-12-11: The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gain Slashcode…