Vulnerabilities (CVE)

Filtered by vendor Ringtail Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-3479 1 Ringtail 1 Casebook 2023-12-10 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in login.asp in Ringtail CaseBook 6.1.0 allows remote attackers to inject arbitrary web script or HTML via the users parameter.
CVE-2005-3480 1 Ringtail 1 Casebook 2023-12-10 5.0 MEDIUM N/A
login.asp in Ringtail CaseBook 6.1.0 displays different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.