Vulnerabilities > Tenfourzero > Shutter > 0.1.4

DATE CVE VULNERABILITY TITLE RISK
2014-08-17 CVE-2014-3905 Cross-Site Scripting vulnerability in Tenfourzero Shutter 0.1.4
Cross-site scripting (XSS) vulnerability in tenfourzero Shutter 0.1.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
4.3
2014-08-17 CVE-2014-3904 SQL Injection vulnerability in Tenfourzero Shutter 0.1.4
SQL injection vulnerability in lib/admin.php in tenfourzero Shutter 0.1.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
network
low complexity
tenfourzero CWE-89
7.5