104 matches found
CVE-2007-6278
CVE-2007-6278 affects the FLAC library (libFLAC) prior to 1.2.1. A crafted .FLAC file can trigger the MIME-Type URL flag in the FLAC image block, allowing a user-assisted remote attacker to cause the client to download arbitrary files. The vulnerability stems from (unexplicit) handling of the ima...
9.3CVSS6.7AI score0.0212EPSS
SaveExploits0References5Affected Software1
CVE-2006-6278
CVE-2006-6278 is a cross-site scripting (XSS) vulnerability in the index.php of @lex Guestbook 4.0.1 , exploitable via the skin parameter to inject arbitrary web script or HTML. Affected software: @lex Guestbook 4.0.1 (index.php). The documents confirm the vulnerability and payload type but do no...
6.8CVSS6AI score0.0141EPSS
SaveExploits0References6Affected Software1
20