Lucene search
+L

55 matches found

NVD
NVD
added 2015/01/01 11:59 a.m.14 views

CVE-2011-5315

Cross-site request forgery CSRF vulnerability in admin/index.php in whCMS 0.115 alpha allows remote attackers to hijack the authentication of administrators for requests that modify credentials via a user save action...

6.8CVSS7AI score0.00609EPSS
SaveExploits1References1
NVD
NVD
added 2014/09/26 10:55 a.m.23 views

CVE-2014-5315

Cross-site scripting XSS vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.5AI score0.02458EPSS
SaveExploits0References4
CVE
CVE
added 2014/09/26 10:00 a.m.74 views

CVE-2014-5315

CVE-2014-5315 affects Adobe products via an XSS in the Help page. Affected: Adobe Acrobat <= 9.5.2 (Mac/Windows) and Adobe ColdFusion

4.3CVSS5.6AI score0.02458EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2014/09/26 10:00 a.m.29 views

CVE-2014-5315

Cross-site scripting XSS vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

5.5AI score0.02458EPSS
SaveExploits0References4
NVD
NVD
added 2013/08/19 11:55 p.m.25 views

CVE-2013-5315

Cross-site scripting XSS vulnerability in the Resource Manager in the MEE submodule mee.module in the Scald module 6.x-1.x before 6.x-1.0-beta3 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the atom title, a different vector than...

2.6CVSS5.6AI score0.01676EPSS
SaveExploits1References9
CVE
CVE
added 2013/08/19 11:00 p.m.56 views

CVE-2013-5315

CVE-2013-5315 is an XSS flaw in Drupal’s Scald module (MEE submodule). Affected: Scald 6.x-1.x before 6.x-1.0-beta3 and Scald 7.x-1.x before 7.x-1.1. Vulnerability: unsanitized atom title in Resource Manager (mee.module) allows remote injection of script/HTML. Impact is low to partial in integrit...

2.6CVSS5.8AI score0.01676EPSS
SaveExploits1References9Affected Software1
CVE
CVE
added 2012/10/08 5:00 p.m.45 views

CVE-2012-5315

Technical details about CVE-2012-5315 are not publicly provided in the supplied documents. Monitor for updates from vendors or security advisories.

4.3CVSS5.9AI score0.01613EPSS
SaveExploits2References3Affected Software1
Circl
Circl
added 2012/01/21 12:00 a.m.8 views

CVE-2012-5315

creationtimestamp| type| source ---|---|--- 2012-01-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18402...

4.3CVSS5.8AI score0.01613EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2009/02/17 12:00 a.m.24 views

Fedora Update for roundcubemail FEDORA-2008-5315

Check for the Version of roundcubemail OpenVAS Vulnerability Test Fedora Update for roundcubemail FEDORA-2008-5315 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

4.3CVSS0.05439EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2008/12/10 12:00 a.m.50 views

Apple iPhone Configuration Web Utility Directory Traversal Vulnerability

This host has Apple iPhone Configuration Web Utility installed and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbappleiphoneconfwebutltydirtrvslvuln.nasl 5370 2017-02-20 15:24:26Z cfi $ Apple iPhone Configuration Web Utility Directory Traversal Vulnerability...

7.8CVSS0.2AI score0.03211EPSS
SaveExploits0References2
CVE
CVE
added 2008/12/03 5:00 p.m.67 views

CVE-2008-5315

CVE-2008-5315: Apple iPhone Configuration Web Utility 1.0 for Windows is affected by a directory traversal vulnerability in its web interface that allows remote attackers to read arbitrary files via unspecified vectors. The issue is tied to the web service component and is documented with CVSS v2...

7.8CVSS6.3AI score0.03211EPSS
SaveExploits0References7Affected Software1
canvas
canvas
added 2007/10/09 9:17 p.m.42 views

Immunity Canvas: LIVEALBUM_INCLUDE

Name| livealbuminclude ---|--- CVE| CVE-2007-5315 Exploit Pack| CANVAS Description| LiveAlbum remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: LiveAlbum CVE Url: https://vulners.com/cve/CVE-2007-5315 CVE Name: CVE-2007-5315...

6.8CVSS6.8AI score0.3856EPSS
SaveExploits2
Cvelist
Cvelist
added 2007/10/09 9:00 p.m.26 views

CVE-2007-5315

PHP remote file inclusion vulnerability in common.php in LiveAlbum 0.9.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the livealbumdir parameter...

7.5AI score0.3856EPSS
SaveExploits2References5
CVE
CVE
added 2007/10/09 9:00 p.m.46 views

CVE-2007-5315

LiveAlbum 0.9.0 is affected by a PHP remote file inclusion via the common.php handling when register_globals is enabled. Attackers can supply a URL to livealbum_dir to run arbitrary PHP code on the affected system. The vulnerability is documented in multiple sources (CVE-2007-5315) and is associa...

6.8CVSS7.5AI score0.3856EPSS
SaveExploits2References5Affected Software1
CVE
CVE
added 2006/10/17 5:00 p.m.51 views

CVE-2006-5315

CVE-2006-5315 affects PHP-based registroTL via main.php, where the page parameter can include ftp:// URLs, enabling a remote file inclusion that lets an attacker execute arbitrary PHP code. The vulnerability is in the handling of external file references, constituting a full RCE under the describ...

7.5CVSS8AI score0.03161EPSS
SaveExploits2References6Affected Software1
Rows per page
Query Builder