posh project posh vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

SQL injection vulnerability in portal/addtoapplication.php in POSH (aka Posh portal or Portaneo) 3.0 prior to 3.3.0 allows remote malicious users to execute arbitrary SQL commands via the rssurl parameter.

Posh Project Posh 3.0 Posh Project Posh 3.1.2 Posh Project Posh 3.0.2 Posh Project Posh 3.0.3 Posh Project Posh 3.0.4 Posh Project Posh 3.1.0 Posh Project Posh 3.1.1 Posh Project Posh 3.0.1 Posh Project Posh

1 EDB exploit

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in POSH (aka Posh portal or Portaneo) 3.0 up to and including 3.2.1 allow remote malicious users to inject arbitrary web script or HTML via the (1) error parameter to /includes/plugins/mobile/scripts/login.php or (2) id paramete...

Posh Project Posh

5.8

CVSSv2

Open redirect vulnerability in the password reset functionality in POSH 3.0 up to and including 3.2.1 allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to portal/scr_sendmd5.php.

Posh Project Posh

6.9

CVSSv2

Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder `C:\.git`, which would be picked...

Git-scm Git Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Fedoraproject Fedora 37 Apple Xcode Debian Debian Linux 10.0

5 Github repositories1 Article

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook