Skip to content
OpenAdvisories

Archive

July 2012

Vulnerabilities first published in this month (UTC), newest first.

2 results · Clear filters · Feed

  • Medium —
    CVE-2011-4280 Public exploit

    Moodle vulnerable to XSS via bundled spikephpcoverage library

    Cross-site scripting (XSS) vulnerability in the Spike PHPCoverage (aka spikephpcoverage) library, as used in Moodle 2.0.x before 2.0.2 and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • Medium —
    CVE-2012-2138 Public exploit EPSS 14%

    Apache Sling POST Servlets Denial of Service Vulnerability

    The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attempts to copy an ancestor node to a descendant node, which allows remote attackers to cause a denial of service (infinite…