Ushahidi Ushahidi Platform — known CVE vulnerabilities

Every CVE whose affected-product data names Ushahidi Ushahidi Platform, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2012-3468 — CVSS 7.5 (high): Multiple SQL injection vulnerabilities in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via…
• CVE-2012-3475 — CVSS 7.5 (high): The installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function, which allows remote attackers to obtain…
• CVE-2012-3470 — CVSS 7.5 (high): Multiple SQL injection vulnerabilities in application/libraries/api/MY_Countries_Api_Object.php in the Ushahidi Platform before 2.5 allow…
• CVE-2012-3471 — CVSS 7.5 (high): Multiple SQL injection vulnerabilities in the edit functions in (1) application/controllers/admin/reports.php and (2)…
• CVE-2012-3469 — CVSS 7.5 (high): Multiple SQL injection vulnerabilities in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via…
• CVE-2012-3473 — CVSS 6.4 (medium): The (1) reports API and (2) administration feature in the comments API in the Ushahidi Platform before 2.5 do not require authentication…
• CVE-2012-3472 — CVSS 6.4 (medium): The email API in application/libraries/api/MY_Email_Api_Object.php in the Ushahidi Platform before 2.5 does not require authentication…
• CVE-2012-3474 — CVSS 5.0 (medium): The comments API in application/libraries/api/MY_Comments_Api_Object.php in the Ushahidi Platform before 2.5 allows remote attackers to…
• CVE-2013-2025 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Ushahidi Platform 2.5.x through 2.6.1 allows remote attackers to inject arbitrary web script or…
• CVE-2012-3476 — CVSS 3.5 (low): Multiple cross-site scripting (XSS) vulnerabilities in (1) application/views/admin/layout.php and (2) themes/default/views/header.php in…