Idevspot

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-5326 Oct 08, 20:55 MEDIUM POC This Month

Cross-site request forgery (CSRF) vulnerability in admin/function.php in IDevSpot iSupport 1.x allows remote attackers to hijack the authentication of administrators for requests that add. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP CSRF Isupport Idevspot

NVD Exploit-DB

CVSS 2.0

6.8

EPSS

0.3%

CVE-2012-1779 Mar 19, 18:55 MEDIUM POC This Month

Cross-site scripting (XSS) vulnerability in IDevSpot idev-BusinessDirectory 3.0 allows remote attackers to inject arbitrary web script or HTML via the SEARCH parameter to index.php. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP XSS Idev Businessdirectory Idevspot

NVD

CVSS 2.0

4.3

EPSS

0.3%

CVE-2012-5326

EPSS 0% CVSS 6.8

MEDIUM POC This Month

PHP CSRF Isupport +1

NVD Exploit-DB

CVE-2012-1779

EPSS 0% CVSS 4.3

MEDIUM POC This Month

PHP XSS Idev Businessdirectory +1

NVD