Lucene search
+L

330 matches found

CNNVD
CNNVD
added 2024/03/22 12:0 a.m.3 views

VvvebJs 安全漏洞

VvvebJs is a drag-and-drop website generator for Givan Personal Developers. A security vulnerability exists in VvvebJs prior to version 1.7.7, which stems from the presence of a Reflective Cross-Site Scripting XSS vulnerability that allows remote attackers to execute arbitrary code and obtain...

6.1CVSS6.2AI score0.0056EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2024/03/06 12:0 a.m.7 views

The vulnerability of the sub_42AF30() function in D-Link DIR-823G router’s software allows a hacker to induce a service failure.

The vulnerability of the sub42AF30 function in D-Link DIR-823G router microprogramming software is related to errors in pointer manipulation when processing the Action parameter. Exploiting this vulnerability can allow an attacker to cause service failure...

6.8CVSS7.1AI score0.00644EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2024/02/29 12:0 a.m.4 views

D-Link DIR-823G Security Vulnerability

The D-Link DIR-823G is a wireless router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-823G version A1V1.0.2B05, which originates from a buffer overflow vulnerability in the SOAPACTION parameter...

8.8CVSS7.3AI score0.01216EPSS
Exploits1References2
NVD
NVD
added 2024/02/27 1:15 a.m.11 views

CVE-2024-25166

Cross Site Scripting vulnerability in 71CMS v.1.0.0 allows a remote attacker to execute arbitrary code via the uploadfile action parameter in the controller.php file...

6.1CVSS7AI score0.00549EPSS
Exploits0References1
Prion
Prion
added 2024/02/27 1:15 a.m.21 views

Cross site scripting

Cross Site Scripting vulnerability in 71CMS v.1.0.0 allows a remote attacker to execute arbitrary code via the uploadfile action parameter in the controller.php file...

7.2AI score0.00549EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/02/26 12:0 a.m.7 views

PT-2024-1969 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version A1V1.0.2B05 Description: The issue is related to null-pointer dereferences in the sub 42AF30 function when handling the Action parameter. This can be exploited by a remote attacker to cause a Denial of Service DoS via ...

6.8CVSS7.2AI score0.00644EPSS
Exploits1References9
CNVD
CNVD
added 2023/11/02 12:0 a.m.60 views

phpMyFAQ action parameter cross-site scripting vulnerability

phpMyFAQ is a multi-language, fully database-driven FAQ system. A cross-site scripting vulnerability exists in versions prior to phpMyFAQ 3.2.2, which stems from the lack of effective filtering and escaping of user-supplied data in the action parameter of admin/index.php?action=, and can be...

7.4CVSS6.3AI score0.01105EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/09/19 12:0 a.m.5 views

Openupload Stable Code Issue Vulnerability

Openupload Stable is a web application. A security vulnerability exists in Openupload Stable version v.0.4.3, which originates from a file upload vulnerability in the file compress-inc.php. The vulnerability can be exploited to execute arbitrary code via the action parameter...

8.8CVSS7.8AI score0.01653EPSS
Exploits1References4
OSV
OSV
added 2023/08/28 1:15 p.m.3 views

CVE-2023-40752

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Make an Offer Widget v1.0...

6.1CVSS5.8AI score0.00974EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2023/08/28 1:15 p.m.4 views

CVE-2023-40751

PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting XSS via the "action" parameter of index.php...

6.1CVSS6.3AI score0.01044EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2023/08/28 1:15 p.m.6 views

CVE-2023-40750

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Yacht Listing Script v1.0...

6.1CVSS6.4AI score0.00966EPSS
Exploits0References5
OSV
OSV
added 2023/08/28 1:15 p.m.6 views

CVE-2023-40750

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Yacht Listing Script v1.0...

6.1CVSS5.8AI score0.00966EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2023/08/28 1:15 p.m.8 views

CVE-2023-40752

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Make an Offer Widget v1.0...

6.1CVSS6.4AI score0.00974EPSS
Exploits0References5
CNNVD
CNNVD
added 2023/08/28 12:0 a.m.9 views

PHPJabbers Make an Offer Widget 跨站脚本漏洞

Make An Offer Widget is a simple offer application. A security vulnerability exists in PHPJabbers Make an Offer Widget v1.0, which is caused by a cross-site scripting vulnerability in the "action" parameter of the index.php file...

6.1CVSS5.9AI score0.00974EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/08/28 12:0 a.m.5 views

Yacht Listing Script 跨站脚本漏洞

Yacht Listing Script is yacht and boat categorization software. A security vulnerability exists in PHPJabbers Yacht Listing Script v1.0, which is caused by a cross-site scripting vulnerability in the "action" parameter of the index.php file...

6.1CVSS5.8AI score0.00966EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/08/28 12:0 a.m.15 views

CVE-2023-40750

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Yacht Listing Script v1.0...

5.9AI score0.00966EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/08/28 12:0 a.m.6 views

PT-2023-27616 · Phpjabbers · Phpjabbers Fundraising Script

Name of the Vulnerable Software and Affected Versions: PHPJabbers Fundraising Script version 1.0 Description: The issue is related to Cross Site Scripting XSS via the action parameter of "index.php". This allows for potential malicious script execution. The estimated number of potentially affecte...

6.1CVSS6AI score0.01044EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2023/08/28 12:0 a.m.12 views

PT-2023-27617 · Phpjabbers · Phpjabbers Make An Offer Widget

Name of the Vulnerable Software and Affected Versions: PHPJabbers Make an Offer Widget version 1.0 Description: There is a Cross Site Scripting XSS issue in the action parameter of the "index.php" file. This allows for potential malicious script execution. Recommendations: For PHPJabbers Make an...

6.1CVSS6AI score0.00974EPSS
Exploits0References7
Cvelist
Cvelist
added 2023/08/28 12:0 a.m.23 views

CVE-2023-40752

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Make an Offer Widget v1.0...

6.2AI score0.00974EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/08/28 12:0 a.m.6 views

Phpjabbers Fundraising Script 跨站脚本漏洞

Phpjabbers Fundraising Script is a simple open source Php donation script from Phpjabbers Serbia. It is used for charity fundraising. A security vulnerability exists in PHPJabbers Fundraising Script v1.0, which originates from a cross-site scripting vulnerability in the "action" parameter of the...

6.1CVSS5.8AI score0.01044EPSS
Exploits0References3
Rows per page
Query Builder