← Back

Ricardo Alexandre De Oliveira Staudt

ricardo_alexandre_de_oliveira_staudt

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Yogurt
yogurt
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-2034
1Ricardo Alexandre De Oliveira Staudt
1Yogurt
Apr 23, 2026
Jun 12, 2009
N/A· v4
N/A· v3
6.0 MEDIUM· v2
SQL injection vulnerability in writemessage.php in Yogurt 0.3, when register_globals is enabled, allows remote authenticated users to execute arbitrary SQL commands via the original parameter.
CVE-2009-2033
1Ricardo Alexandre De Oliveira Staudt
1Yogurt
Apr 23, 2026
Jun 12, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in index.php in Yogurt 0.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.