Lucene search
+L

4 matches found

OSV
OSV
•added 2022/05/13 1:11 a.m.•52 views

GHSA-Q6V4-XJP2-8GGV Securimage HTML Injection

HTML Injection in Securimage prior to 3.6.6 allows remote attackers to inject arbitrary HTML into an e-mail message body via the $SERVER'HTTPUSERAGENT' parameter to exampleform.ajax.php or exampleform.php...

6.1CVSS6.4AI score0.00814EPSS
SaveExploits1References5
NVD
NVD
•added 2017/11/18 1:29 a.m.•31 views

CVE-2017-14077

HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message body via the $SERVER'HTTPUSERAGENT' parameter to exampleform.ajax.php or exampleform.php...

6.1CVSS6.5AI score0.00814EPSS
SaveExploits1References2
OSV
OSV
•added 2017/11/18 1:29 a.m.•24 views

CVE-2017-14077

HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message body via the $SERVER'HTTPUSERAGENT' parameter to exampleform.ajax.php or exampleform.php...

6.1CVSS7.2AI score
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/01/05 12:00 a.m.•5 views

CVE-2006-0084: Undefined Security Weakness

Cross-site scripting vulnerability in index.php in raSMP 2.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the $SERVERHTTPUSERAGENT variable User-Agent header...

5CVSS6AI score0.01576EPSS
SaveExploits0References1
Rows per page
Query Builder