Lucene search
+L

41 matches found

CNNVD
CNNVD
•added 2024/02/26 12:00 a.m.•21 views

AnythingLLM Cross-Site Scripting Vulnerability

AnythingLLM is a document chatbot that meets business requirements. AnythingLLM suffers from a cross-site scripting vulnerability that originates from injecting cross-site scripting into the chat box...

8.1CVSS6.2AI score0.00469EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2023/07/26 9:15 p.m.•7 views

CVE-2022-31455

A cross-site scripting XSS vulnerability in Truedesk v1.2.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a user chat box...

6.1CVSS6.5AI score0.00357EPSS
SaveExploits0References4
OSV
OSV
•added 2023/07/26 9:15 p.m.•15 views

CVE-2022-31455

A cross-site scripting XSS vulnerability in Truedesk v1.2.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a user chat box...

6.1CVSS5.9AI score0.00357EPSS
SaveExploits0References2
Prion
Prion
•added 2023/07/26 9:15 p.m.•26 views

Cross site scripting

A cross-site scripting XSS vulnerability in Truedesk v1.2.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a user chat box...

5.8CVSS5.9AI score0.00357EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/26 12:00 a.m.•4 views

CVE-2022-31455: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Truedesk v1.2.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a user chat box...

6.1CVSS6.6AI score0.00357EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/07/26 12:00 a.m.•33 views

CVE-2022-31455

A cross-site scripting XSS vulnerability in Truedesk v1.2.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a user chat box...

6AI score0.00357EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/07/26 12:00 a.m.•21 views

CVE-2022-31455

A cross-site scripting XSS vulnerability in Truedesk v1.2.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into a user chat box...

5.8AI score0.00357EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/07/28 12:15 a.m.•17 views

CVE-2021-33371

A stored cross-site scripting XSS vulnerability in /navbaraction.php of Student Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat box...

5.4CVSS6.2AI score0.00605EPSS
SaveExploits1References2
OSV
OSV
•added 2022/07/28 12:15 a.m.•17 views

CVE-2021-33371

A stored cross-site scripting XSS vulnerability in /navbaraction.php of Student Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat box...

5.4CVSS5.9AI score0.00605EPSS
SaveExploits1References1
Prion
Prion
•added 2022/07/28 12:15 a.m.•27 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in /navbaraction.php of Student Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat box...

4.9CVSS5.2AI score0.00605EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/07/27 11:15 p.m.•41 views

CVE-2021-33371

A stored cross-site scripting XSS vulnerability in /navbaraction.php of Student Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat box...

5.4AI score0.00605EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/07/27 12:00 a.m.•17 views

PT-2022-10231 · Unknown · Student Management System

Name of the Vulnerable Software and Affected Versions: Student Management System version 1.0 Description: A stored cross-site scripting XSS issue in the "/nav bar action.php" API endpoint allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat box...

5.4CVSS6.2AI score0.00605EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/27 12:00 a.m.•8 views

CVE-2021-33371: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in /navbaraction.php of Student Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat box...

5.4CVSS6.2AI score0.00605EPSS
SaveExploits1References2
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•31 views

MyBB KingChat Plugin - Persistent XSS

No description provided by source. Exploit Title: MyBB 'kingchat' chat-box plugin. Google Dork: inurl:/kingchat.php? Date: 8/12/12 Author: VipVince Vendor Homepage: http://mods.mybb.com/ Software LinK: http://mods.mybb.com/view/kingchat Tested on: Windows Using the dork inurl:/kingchat.php? you...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•18 views

Vanilla Forums Van2Shout Plugin 1.0.51 - Multiple CSRF Vulnerabilities

No description provided by source. Exploit Title: Vanilla Forums = 2.0.18.8 & Van2Shout 1.0.51 Multiple CSRF Google Dork: n/a Date: 13/4/13 Exploit Author: Henry Hoggard Vendor Homepage: http://vanillaforums.org/ , http://vanillaforums.org/addon/van2shout-plugin Software Link:...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2013/04/15 12:00 a.m.•20 views

Vanilla Forums Van2Shout Plugin 1.0.51 - Multiple Cross-Site Request Forgery Vulnerabilities

Vanilla Forums Van2Shout Plugin 1.0.51 - Multiple Cross-Site Request Forgery Vulnerabilities Exploit Title: Vanilla Forums where 1337 is the id. Bookmark CSRF: http://site.org/index.php=/vanilla/discussion/bookmark/1337 UnBookmark CSRF http://site.org/index.php=/vanilla/discussion/bookmark/1337?...

0.9AI score
SaveExploits0
zdt
zdt
•added 2012/12/09 12:00 a.m.•27 views

MyBB KingChat Plugin Persistent XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: MyBB 'kingchat' chat-box plugin. Google Dork: inurl:/kingchat.php? Date: 8/12/12 Author: VipVince Vendor Homepage: http://mods.mybb.com/ Software LinK: http://mods.mybb.com/view/kingchat Tested on: Windows Using the dork...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2012/12/09 12:00 a.m.•36 views

MyBB KingChat Plugin - Persistent Cross-Site Scripting

Exploit Title: MyBB 'kingchat' chat-box plugin. Google Dork: inurl:/kingchat.php? Date: 8/12/12 Author: VipVince Vendor Homepage: http://mods.mybb.com/ Software LinK: http://mods.mybb.com/view/kingchat Tested on: Windows Using the dork inurl:/kingchat.php? you will see multiple forums running thi...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2012/12/08 12:00 a.m.•27 views

MyBB Kingchat Cross Site Scripting

Exploit Title: MyBB 'kingchat' chat-box plugin. Google Dork: inurl:/kingchat.php? Date: 8/12/12 Author: VipVince Vendor Homepage: http://mods.mybb.com/ Software LinK: http://mods.mybb.com/view/kingchat Tested on: Windows Using the dork inurl:/kingchat.php? you will see multiple forums running thi...

7.4AI score
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2004/04/09 12:00 a.m.•29 views

Scorched 3D server chat box format string vulnerability

Background Scorched 3D is a game based loosely on the classic DOS game "Scorched Earth". Scorched 3D adds amongst other new features a 3D island environment and LAN and internet play. Scorched 3D is totally free and is available for multiple operating systems. Description Scorched 3D build 36.2 a...

8.2AI score
SaveExploits0
Rows per page
Query Builder