Lucene search
+L

5 matches found

osv_ghsa
osv_ghsa
•added 2022/05/13 1:11 a.m.•53 views

GHSA-Q6V4-XJP2-8GGV Securimage HTML Injection

HTML Injection in Securimage prior to 3.6.6 allows remote attackers to inject arbitrary HTML into an e-mail message body via the $SERVER'HTTPUSERAGENT' parameter to exampleform.ajax.php or exampleform.php...

6.1CVSS6.4AI score0.00814EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2017/11/18 1:29 a.m.•27 views

CVE-2017-14077

HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message body via the $SERVER'HTTPUSERAGENT' parameter to exampleform.ajax.php or exampleform.php...

6.1CVSS7.2AI score
SaveExploits0References2
NVD
NVD
•added 2017/11/18 1:29 a.m.•35 views

CVE-2017-14077

HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message body via the $SERVER'HTTPUSERAGENT' parameter to exampleform.ajax.php or exampleform.php...

6.1CVSS6.5AI score0.00814EPSS
SaveExploits1References2
Mend
Mend
•added 2017/11/18 1:00 a.m.•5 views

CVE-2017-14077

HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message body via the $SERVER'HTTPUSERAGENT' parameter to exampleform.ajax.php or exampleform.php...

6.1CVSS0.00814EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/01/05 12:00 a.m.•10 views

CVE-2006-0084: Undefined Security Weakness

Cross-site scripting vulnerability in index.php in raSMP 2.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the $SERVERHTTPUSERAGENT variable User-Agent header...

5CVSS6AI score0.01576EPSS
SaveExploits0References1
Rows per page
Query Builder