Vulnerabilities > Livestreet > Livestreet > 0.2
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2009-09-18 | CVE-2009-3261 | Improper Authentication vulnerability in Livestreet 0.2 update/update_0.1.2_to_0.2.php in LiveStreet 0.2 does not require administrative authentication, which allows remote attackers to perform DROP TABLE operations via unspecified vectors. | 7.5 |
| 2009-09-18 | CVE-2009-3260 | Cross-Site Scripting vulnerability in Livestreet 0.2 Cross-site scripting (XSS) vulnerability in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the header of the topic in a comment. | 4.3 |
| 2009-09-18 | CVE-2009-3256 | Cross-Site Scripting vulnerability in Livestreet 0.2 Cross-site scripting (XSS) vulnerability in include/ajax/blogInfo.php in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the URI, as demonstrated by a SCRIPT element in an arbitrary parameter such as the asd parameter. | 4.3 |