Open Source Development Network / Slashcode
6 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2004-2656 | Multiple cross-site scripting (XSS) vulnerabilities in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) before R_2_5_0_41 allow remote att… | MEDIUM | 4.3 | Apr 13, 2006 |
| CVE-2001-1535 | Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtain session ID's from cookies and gain unauthorized… | MEDIUM | 4.6 | Jul 14, 2005 |
| CVE-2002-1748 | Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to gain access to arbitrary accounts. | HIGH | 7.2 | Jun 21, 2005 |
| CVE-2002-1681 | Cross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002 allows remote attackers to execute arbitrary script as other use… | MEDIUM | 6.8 | Jun 21, 2005 |
| CVE-2002-0292 | Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and authentication infor… | LOW | 2.6 | Apr 2, 2003 |
| CVE-2000-1015 | The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gain Slashcode privileg… | HIGH | 7.5 | Nov 29, 2000 |
Showing 1 to 6 of 6 CVEs