Limny is prone to multiple remote vulnerabilities, including: - Multiple HTML-injection vulnerabilities - Multiple SQL-injection vulnerabilities - Multiple security-bypass vulnerabilities - Multiple cross-site scripting vulnerabilities. The attacker may exploit these issues to compromise the application, execute arbitrary code, steal cookie-based authentication credentials, gain unauthorized access to the application, modify data, or exploit latent vulnerabilities in the underlying database. Other attacks are also possible. Limny 2.01 is vulnerable other versions may also be affected.

• http://www.limny.org/
• http://www.securityfocus.com/bid/38859

---

Updated on 2015-03-25