FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-11-25 08:52:18 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
14d846d6-27b3-11e5-a15a-50af736ef1c0pivotx -- cross-site scripting (XSS) vulnerability

pivotx reports:

cross-site scripting (XSS) vulnerability in the nickname (and possibly the email) field. Mitigated by the fact that an attacker must have a PivotX account.


Discovery 2014-04-15
Entry 2015-07-11
pivotx
< 2.3.9

CVE-2014-0341
7313b0e3-27b4-11e5-a15a-50af736ef1c0pivotx -- Multiple unrestricted file upload vulnerabilities

Pivotx reports:

Multiple unrestricted file upload vulnerabilities in fileupload.php in PivotX before 2.3.9 allow remote authenticated users to execute arbitrary PHP code by uploading a file with a (1) .php or (2) .php# extension, and then accessing it via unspecified vectors.


Discovery 2014-04-15
Entry 2015-07-11
pivotx
< 2.3.9

CVE-2014-0341