Lucene search
+L

28 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/02/15 12:00 a.m.•3 views

CVE-2013-2516: Improper Neutralization of Special Elements used in a Command

Vulnerability in FileUtils v0.7, Ruby Gem Fileutils = v0.7 Command Injection vulnerability in user supplied url variable that is passed to the shell...

9.3CVSS5.8AI score0.03327EPSS
SaveExploits1References2
Veracode
Veracode
•added 2018/11/28 6:45 a.m.•27 views

Information Disclosure

ShowDoc/ShowDoc is vulnerable to information disclosure. The library does not properly configure it's access controls by default, allowing a malicious user to use the pageid variable in the URL to gain access to sensitive information...

6.5CVSS6.2AI score0.01197EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2011/12/22 3:29 p.m.•25 views

Crlf injection

CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2.1.3, and 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors involving the url variable...

5CVSS7.4AI score0.01022EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2009/07/08 3:30 p.m.•24 views

CVE-2009-2380

Cross-site scripting XSS vulnerability in includes/functions.php in 4images 1.7 through 1.7.7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the url variable...

4.3CVSS5.6AI score0.01065EPSS
SaveExploits0References5
Prion
Prion
•added 2009/07/08 3:30 p.m.•26 views

Cross site scripting

Cross-site scripting XSS vulnerability in includes/functions.php in 4images 1.7 through 1.7.7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the url variable...

4.3CVSS6.1AI score0.01065EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2009/07/08 3:00 p.m.•33 views

CVE-2009-2380

Cross-site scripting XSS vulnerability in includes/functions.php in 4images 1.7 through 1.7.7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the url variable...

5.6AI score0.01065EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2007/01/09 12:28 a.m.•28 views

CVE-2007-0106

Cross-site scripting XSS vulnerability in the CSRF protection scheme in WordPress before 2.0.6 allows remote attackers to inject arbitrary web script or HTML via a CSRF attack with an invalid token and quote characters or HTML tags in URL variable names, which are not properly handled when...

6.8CVSS6AI score0.02989EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2007/01/09 12:00 a.m.•31 views

CVE-2007-0106

Cross-site scripting XSS vulnerability in the CSRF protection scheme in WordPress before 2.0.6 allows remote attackers to inject arbitrary web script or HTML via a CSRF attack with an invalid token and quote characters or HTML tags in URL variable names, which are not properly handled when...

6.8CVSS4.1AI score0.02989EPSS
SaveExploits0
Rows per page
Query Builder