Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:16 p.m.5 views

CVE-2018-1000139

I, Librarian version 4.8 and earlier contains a Cross Site Scripting XSS vulnerability in "id" parameter in stable.php that can result in an attacker using the XSS to send a malicious script to an unsuspecting user...

6.1CVSS5.3AI score0.0024EPSS
Exploits1References1
CVE
CVE
added 2018/03/23 9:0 p.m.49 views

CVE-2018-1000139

CVE-2018-1000139 affects Scilico I, Librarian prior to version 4.8. The issue is a Cross Site Scripting (XSS) vulnerability in the user-controllable parameter "id" within stable.php, allowing an attacker to inject a malicious script that could be executed in a victim’s browser. The linked Red Hat...

6.1CVSS5.7AI score0.0024EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2017/11/03 6:0 p.m.43 views

CVE-2017-1000139

Mahara versions 1.8 before 1.8.7, 1.9 before 1.9.5, 1.10 before 1.10.3, and 15.04 before 15.04.0 are vulnerable to server-side request forgery (SSRF) because curl redirects are not consistently checked against a white/black list. Employing SafeCurl will prevent issues.

8CVSS7.8AI score0.00206EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2016/10/10 8:59 p.m.12 views

CVE-2016-1000139

Reflected XSS in wordpress plugin infusionsoft v1.5.11...

6.1CVSS6AI score0.02927EPSS
Exploits2References3
CVE
CVE
added 2016/10/10 8:0 p.m.67 views

CVE-2016-1000139

The WordPress Infusionsoft Gravity Forms Add-on Plugin

6.1CVSS5.9AI score0.02927EPSS
Exploits2References3Affected Software1
Cvelist
Cvelist
added 2016/10/10 8:0 p.m.13 views

CVE-2016-1000139

Reflected XSS in wordpress plugin infusionsoft v1.5.11...

6AI score0.02927EPSS
Exploits2References3
Rows per page
Query Builder