Kozos Easyctf
3 CVEs affecting Kozos Easyctf. Latest disclosed: 2015-05-01. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-0914 | | 2015-05-01 | EasyCTF before 1.4 does not validate the session ID, which allows remote attackers to obtain access via a crafted HTTP request. | |
CVE-2015-0913 | | 2015-05-01 | Cross-site scripting (XSS) vulnerability in EasyCTF before 1.4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. | |
CVE-2015-0912 | | 2015-05-01 | EasyCTF before 1.4 allows remote authenticated users to write executable content to files via unspecified vectors. |