5 results · Feed
-
Unscored —
A cross-site scripting vulnerability exists in Citadel versions prior to 994. When a malicious user sends an instant me…
-
Unscored —
A Weak Session Management vulnerability in Citadel WebCit through 926 allows unauthenticated remote attackers to hijack…
-
Unscored —
An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers t…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Citadel WebCit through 926 allow remote attackers to inject arbi…
-
Unscored —
Citadel WebCit through 926 allows unauthenticated remote attackers to enumerate valid users within the platform. NOTE: …