Ushahidi

11 CVEs across 2 Ushahidi products. Browse Ushahidi vulnerabilities, severities, and proof-of-concept exploits.

Ushahidi products with known CVEs

ProductCVEs
Ushahidi Platform10
Ushahidi1
Ushahidi CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2012-5618Critical9.82020-02-04Ushahidi before 2.6.1 has insufficient entropy for forgot-password tokens.
CVE-2013-20252014-04-25Cross-site scripting (XSS) vulnerability in Ushahidi Platform 2.5.x through 2.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecifie…
CVE-2012-34762012-08-12Multiple cross-site scripting (XSS) vulnerabilities in (1) application/views/admin/layout.php and (2) themes/default/views/header.php in the Ushahidi Platform…
CVE-2012-34752012-08-12The installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function, which allows remote attackers to obtain administrative privileges v…
CVE-2012-34742012-08-12The comments API in application/libraries/api/MY_Comments_Api_Object.php in the Ushahidi Platform before 2.5 allows remote attackers to obtain sensitive inform…
CVE-2012-34732012-08-12The (1) reports API and (2) administration feature in the comments API in the Ushahidi Platform before 2.5 do not require authentication, which allows remote a…
CVE-2012-34722012-08-12The email API in application/libraries/api/MY_Email_Api_Object.php in the Ushahidi Platform before 2.5 does not require authentication, which allows remote att…
CVE-2012-34712012-08-12Multiple SQL injection vulnerabilities in the edit functions in (1) application/controllers/admin/reports.php and (2) application/controllers/members/reports.p…
CVE-2012-34702012-08-12Multiple SQL injection vulnerabilities in application/libraries/api/MY_Countries_Api_Object.php in the Ushahidi Platform before 2.5 allow remote attackers to e…
CVE-2012-34692012-08-12Multiple SQL injection vulnerabilities in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via vectors related to (1)…
CVE-2012-34682012-08-12Multiple SQL injection vulnerabilities in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via vectors related to (1)…