Lucene search
+L

9372 matches found

NVD
NVD
•added 2022/12/11 8:15 a.m.•35 views

CVE-2022-4400

A vulnerability was found in zbl1996 FS-Blog and classified as problematic. This issue affects some unknown processing of the component Title Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-21526...

6.1CVSS0.00393EPSS
SaveExploits0References2
Prion
Prion
•added 2022/12/11 8:15 a.m.•31 views

Cross site scripting

A vulnerability was found in zbl1996 FS-Blog and classified as problematic. This issue affects some unknown processing of the component Title Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-21526...

5.8CVSS6.1AI score0.00393EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/12/11 12:00 a.m.•10 views

CVE-2022-4400 zbl1996 FS-Blog Title cross site scripting

A vulnerability was found in zbl1996 FS-Blog and classified as problematic. This issue affects some unknown processing of the component Title Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-21526...

3.5CVSS4.2AI score0.00393EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/12/11 12:00 a.m.•18 views

FS-Blog Cross-Site Scripting Vulnerabilities

FS-Blog is a personal blog based on Spring Boot by the individual developer of zbl1996. A security vulnerability exists in FS-Blog. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

6.1CVSS6AI score0.00393EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/11 12:00 a.m.•8 views

CVE-2022-4400: Improper Neutralization

A vulnerability was found in zbl1996 FS-Blog and classified as problematic. This issue affects some unknown processing of the component Title Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-21526...

6.1CVSS3.9AI score0.00393EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/12/11 12:00 a.m.•45 views

CVE-2022-4400 zbl1996 FS-Blog Title cross site scripting

A vulnerability was found in zbl1996 FS-Blog and classified as problematic. This issue affects some unknown processing of the component Title Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-21526...

3.5CVSS6.2AI score0.00393EPSS
SaveExploits0References2
CVE
CVE
•added 2022/12/11 12:00 a.m.•72 views

CVE-2022-4400

CVE-2022-4400 affects the zbl1996 FS-Blog Title Handler. The vulnerability stems from an issue in the Title Handler’s processing that enables cross-site scripting (XSS). Exploitation could be remote. Documents consistently describe XSS impact but do not provide concrete patch versions or remediat...

6.1CVSS4.8AI score0.00393EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2022/12/10 7:15 p.m.•34 views

CVE-2022-4397

A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...

6.5CVSS0.00259EPSS
SaveExploits0References2
Prion
Prion
•added 2022/12/10 7:15 p.m.•33 views

Cross site request forgery (csrf)

A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...

4.3CVSS6.5AI score0.00259EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/12/10 12:00 a.m.•26 views

PT-2022-27050 · Unknown · Morontt Zend-Blog-Number-2

Name of the Vulnerable Software and Affected Versions: morontt zend-blog-number-2 affected versions not specified Description: A vulnerability was found in the component Comment Handler, specifically in the file application/forms/Comment.php. The manipulation leads to cross-site request forgery. ...

6.5CVSS6.3AI score0.00259EPSS
SaveExploits0References6
Mend
Mend
•added 2022/12/10 12:00 a.m.•8 views

CVE-2022-4397

A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...

6.5CVSS0.00259EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/10 12:00 a.m.•8 views

CVE-2022-4397: Incorrect Authorization

A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...

6.5CVSS5AI score0.00259EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/12/10 12:00 a.m.•59 views

CVE-2022-4397 morontt zend-blog-number-2 Comment Comment.php cross-site request forgery

A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...

4.3CVSS6.7AI score0.00259EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/12/10 12:00 a.m.•38 views

CVE-2022-4397 morontt zend-blog-number-2 Comment Comment.php cross-site request forgery

A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...

4.3CVSS5AI score0.00259EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/12/10 12:00 a.m.•35 views

CVE-2022-4397 morontt zend-blog-number-2 Comment Comment.php cross-site request forgery

A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...

4.3CVSS5.3AI score0.00259EPSS
SaveExploits0References4
CVE
CVE
•added 2022/12/10 12:00 a.m.•91 views

CVE-2022-4397

The CVE-2022-4397 entry concerns morontt zend-blog-number-2, where a vulnerability in the Comment Handler (file application/forms/Comment.php) allows cross-site request forgery. The issue arises from a manipulation of an unknown function in that file, with remote execution of the CSRF attack poss...

6.5CVSS5.4AI score0.00259EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2022/12/10 12:00 a.m.•23 views

Zend-blog-2 Cross-Site Request Forgery Vulnerability

Zend-blog-2 is a framework blog by Alexander Harchenko personal developer. A security vulnerability exists in Zend-blog-2. An attacker can exploit this vulnerability to perform cross-site request forgery attacks...

6.5CVSS6.3AI score0.00259EPSS
SaveExploits0References3
Akamai Blog
Akamai Blog
•added 2022/12/08 3:00 p.m.•34 views

An Overview of MS-RPC and Its Security Mechanisms

MS-RPC is a widely used protocol, but not much security research is done on it. In this blog, see an overview of MS-RPC and their security mechanisms...

2AI score
SaveExploits0
osv_cve
osv_cve
•added 2022/12/08 10:15 a.m.•13 views

CVE-2022-4354

A vulnerability was found in LinZhaoguan pb-cms 2.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /blog/comment of the component Message Board. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has be...

9.6CVSS3.7AI score0.00572EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/12/08 12:00 a.m.•21 views

pb-cms Cross-Site Scripting Vulnerabilities

pb-cms is a content management system by LinZhaoguan Personal Developer. A security vulnerability exists in version 2.0 of pb-cms, which originates from some unknown functions in the /blog/comment file of its Message Board component, allowing an attacker to implement cross-site scripting. The...

9.6CVSS7.4AI score0.00572EPSS
SaveExploits1References3
Rows per page
Query Builder