Lucene search
+L

55 matches found

Openbugbounty
Openbugbounty
added 2020/10/20 5:49 a.m.5 views

6879.ol1j.com Cross Site Scripting vulnerability OBB-1427289

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
CVE
CVE
added 2019/11/22 6:20 p.m.122 views

CVE-2013-6879

The connected HTB advisory details CVE-2013-6879 in MijoSearch for Joomla! (version 2.0.1 and earlier). The vulnerability arises from improper error handling in /component/mijosearch/search, which allows an attacker to obtain the full installation path via an externally generated error message (i...

5.3CVSS4.9AI score0.01113EPSS
SaveExploits3References1Affected Software1
CVE
CVE
added 2018/04/12 10:0 p.m.43 views

CVE-2018-6879

The CVE-2018-6879 entry concerns PHP Scripts Mall Website Seller Script 2.0.3 where client-side validation is used to enforce email format. The vulnerability arises because the validation can be bypassed by removing the client-side validation code, enabling a remote attacker to modify a registere...

8.8CVSS8.6AI score0.01053EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2017/05/11 2:1 p.m.8 views

CVE-2015-6879

...

SaveExploits0
CVE
CVE
added 2017/05/11 2:1 p.m.28 views

CVE-2015-6879

CVE-2015-6879 is rejected/not used and does not represent an active vulnerability entry.

6.6AI score
SaveExploits0
OSV
OSV
added 2017/04/10 3:59 p.m.18 views

CVE-2016-6879

The X509Certificate::allowedusage function in botan 1.11.x before 1.11.31 might allow attackers to have unspecified impact by leveraging a call with more than one KeyUsage set in the enum value...

7.5CVSS7.1AI score
SaveExploits0References1
CVE
CVE
added 2017/04/10 3:0 p.m.51 views

CVE-2016-6879

CVE-2016-6879 affects Botan (X509_Certificate::allowed_usage) in version 1.11.x before 1.11.31, where a call with more than one Key_Usage set in the enum value may cause unspecified impact. Affected: Botan 1.11.x prior to 1.11.31. No remediation details are provided in the supplied documents.

7.5CVSS7.7AI score0.00558EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2014/10/02 10:0 a.m.52 views

CVE-2014-6879

The CVE-2014-6879 entry concerns the Equifax Mobile app (com.equifax) for Android, version 1.5. The authenticated description states that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a craft...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References3Affected Software1
securityvulns
securityvulns
added 2014/01/09 12:0 a.m.73 views

XSS and Full Path Disclosure in MijoSearch Joomla Extension

Advisory ID: HTB23186 Product: MijoSearch Vendor: Mijosoft Vulnerable Versions: 2.0.1 and probably prior Tested Version: 2.0.1 Advisory Publication: November 25, 2013 without technical details Vendor Notification: November 25, 2013 Public Disclosure: December 16, 2013 Vulnerability Type: Cross-Si...

6.4AI score0.01113EPSS
SaveExploits4
zdt
zdt
added 2013/12/19 12:0 a.m.84 views

MijoSearch 2.0.1 Cross Site Scripting / Exposure Vulnerabilities

MijoSearch Joomla plugin version 2.0.1 suffers from cross site scripting and information exposure vulnerabilities. Product: MijoSearch Vendor: Mijosoft Vulnerable Versions: 2.0.1 and probably prior Tested Version: 2.0.1 Advisory Publication: November 25, 2013 without technical details Vendor...

5.6AI score0.01113EPSS
SaveExploits4
Packet Storm
Packet Storm
added 2013/12/17 12:0 a.m.63 views

MijoSearch 2.0.1 Cross Site Scripting / Exposure

Advisory ID: HTB23186 Product: MijoSearch Vendor: Mijosoft Vulnerable Versions: 2.0.1 and probably prior Tested Version: 2.0.1 Advisory Publication: November 25, 2013 without technical details Vendor Notification: November 25, 2013 Public Disclosure: December 16, 2013 Vulnerability Type: Cross-Si...

5.5AI score0.01113EPSS
SaveExploits4
Tenable Nessus
Tenable Nessus
added 2011/01/27 12:0 a.m.45 views

SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6879)

This update of acroread fixes : - Cross-domain request vulnerability CVE-2010-0188: CVSS v2 Base Score: 6.8 An unspecified vulnerability that possibly allowed remote code execution. CVE-2010-0186: CVSS v2 Base Score: 5.8 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of...

9.3CVSS8.5AI score0.88246EPSS
SaveExploits15References4
NVD
NVD
added 2009/07/30 7:30 p.m.34 views

CVE-2008-6879

Cross-site scripting XSS vulnerability in Apache Roller 2.3, 3.0, 3.1, and 4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action...

4.3CVSS5.6AI score0.04989EPSS
SaveExploits0References5
CVE
CVE
added 2009/07/30 7:0 p.m.69 views

CVE-2008-6879

CVE-2008-6879 affects Apache Roller 2.3, 3.0, 3.1, and 4.0. The vulnerability is a Cross-Site Scripting (XSS) flaw caused by insufficient sanitization of the q parameter in search actions, allowing injection of arbitrary web script/HTML. Concrete details available in connected docs include produc...

4.3CVSS5.8AI score0.04989EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2007/01/05 2:0 a.m.46 views

CVE-2006-6879

Unrestricted file upload vulnerability CVE-2006-6879 affects PHP-Update 2.7 and earlier. Authenticated users can upload arbitrary PHP scripts via the userfile parameter to gfx/ and files/ directories through admin/uploads.php. The NVD notes a base AV:N/AC:M/Au:S/C:P/I:P/A:P with a medium base sco...

6CVSS6.9AI score0.0188EPSS
SaveExploits3References5Affected Software1
Rows per page
Query Builder