Lucene search
+L

47 matches found

Positive Technologies
Positive Technologies
•added 2023/07/24 12:00 a.m.•19 views

PT-2023-26534 · Unknown · Travelmate Travelable Trek Management Solution

Name of the Vulnerable Software and Affected Versions: Travelmate Travelable Trek Management Solution version 1.0 Description: A vulnerability was found in the component Comment Box Handler of the Travelmate Travelable Trek Management Solution. The manipulation of the comment argument leads to...

4.7CVSS6.5AI score0.00415EPSS
SaveExploits0References5
CNVD
CNVD
•added 2022/09/30 12:00 a.m.•82 views

FeehiCMS Cross-Site Scripting Vulnerability

FeehiCMS is a Php-based CMS builder by Liufee's personal developer. feehiCMS version v2.1.1 has a security vulnerability that stems from the ability to inject carefully crafted payloads via the comment box under the single page module. No detailed vulnerability details are currently available...

5.4CVSS2.8AI score0.00506EPSS
SaveExploits1References1
Prion
Prion
•added 2022/09/29 2:15 p.m.•29 views

Cross site scripting

FeehiCMS v2.1.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module...

4.9CVSS5.2AI score0.00506EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2022/09/29 1:33 p.m.•8 views

CVE-2022-40408

FeehiCMS v2.1.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module...

5.4CVSS0.00506EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2022/09/29 1:33 p.m.•8 views

CVE-2022-40408

FeehiCMS v2.1.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module...

5.3AI score0.00506EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/29 12:00 a.m.•6 views

CVE-2022-40408: Improper Neutralization of Input During Web Page Generation

FeehiCMS v2.1.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module...

5.4CVSS5.8AI score0.00506EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/09/29 12:00 a.m.•22 views

FeehiCMS cross-site scripting vulnerability

FeehiCMS is a Php-based CMS builder by Liufee's personal developer. feehiCMS version v2.1.1 has a security vulnerability that stems from the ability to inject carefully crafted payloads via the comment box under the single page module. No detailed vulnerability details are currently available...

5.4CVSS6.8AI score0.00506EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/09/29 12:00 a.m.•22 views

PT-2022-25371 · Feehicms · Feehicms

Name of the Vulnerable Software and Affected Versions: FeehiCMS versions 2.0.1.1 and prior Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited via a crafted payload injected into the Comment box under the Single Page module...

5.4CVSS5AI score0.00506EPSS
SaveExploits1References7
attackerkb
attackerkb
•added 2022/04/10 9:15 p.m.•10 views

CVE-2022-27961

A cross-site scripting XSS vulnerability at /ofcms/company-c-47 in OFCMS v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comment text box...

5.4CVSS6.3AI score0.00436EPSS
SaveExploits1References2
NVD
NVD
•added 2019/07/05 3:16 p.m.•29 views

CVE-2019-13341

In MiniCMS V1.10, stored XSS was found in mc-admin/conf.php comment box, which can be used to get a user's cookie...

4.8CVSS4.8AI score0.00622EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2019/07/05 3:16 p.m.•29 views

CVE-2019-13341

In MiniCMS V1.10, stored XSS was found in mc-admin/conf.php comment box, which can be used to get a user's cookie...

4.8CVSS5.7AI score
SaveExploits0References1
Prion
Prion
•added 2019/07/05 3:16 p.m.•31 views

Cross site scripting

In MiniCMS V1.10, stored XSS was found in mc-admin/conf.php comment box, which can be used to get a user's cookie...

3.5CVSS4.7AI score0.00622EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2019/07/05 2:05 p.m.•35 views

CVE-2019-13341

In MiniCMS V1.10, stored XSS was found in mc-admin/conf.php comment box, which can be used to get a user's cookie...

4.9AI score0.00622EPSS
SaveExploits1References1
exploitpack
exploitpack
•added 2018/02/27 12:00 a.m.•23 views

MyBB My Arcade Plugin 1.3 - Cross-Site Scripting

MyBB My Arcade Plugin 1.3 - Cross-Site Scripting Exploit Title: MyBB My Arcade Plugin v1.3 - Persistent XSS Date: 2/21/2018 Author: 0xB9 Contact: luxorforums.com/User-0xB9 or 0xB9atprotonmail.com Software Link: https://community.mybb.com/mods.php?action=view&pid=411 Version: 1.3 Tested on: Ubuntu...

6.7AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2013/09/23 12:00 a.m.•159 views

WordPress Plugin NOSpamPTI - Blind SQL Injection

NOSpamPTI Wordpress plugin Blind SQL Injection Vendor product description NOSpamPTI eliminates the spam in your comment box so strong and free, developed from the idea of Nando Vieira http://bit.ly/d38gB8, but some themes do not support changes to the functions.php to this we alter this function...

7.5CVSS5.2AI score0.02785EPSS
SaveExploits6
zdt
zdt
•added 2013/09/23 12:00 a.m.•101 views

Wordpress NOSpamPTI Plugin - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications NOSpamPTI Wordpress plugin Blind SQL Injection Vendor product description NOSpamPTI eliminates the spam in your comment box so strong and free, developed from the idea of Nando Vieira http://bit.ly/d38gB8, but some themes do not support change...

7.5CVSS0.4AI score0.02785EPSS
SaveExploits6
zdt
zdt
•added 2013/09/21 12:00 a.m.•86 views

WordPress NOSpamPTI 2.1 Blind SQL Injection Vulnerability

WordPress NOSpamPTI plugin version 2.1 suffers from a remote blind SQL injection vulnerability. NOSpamPTI Wordpress plugin Blind SQL Injection Vendor product description NOSpamPTI eliminates the spam in your comment box so strong and free, developed from the idea of Nando Vieira...

7.5CVSS0.2AI score0.02785EPSS
SaveExploits6
NVD
NVD
•added 2010/12/02 4:22 p.m.•37 views

CVE-2010-4371

Buffer overflow in the inmod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to the comment box...

9.3CVSS6.9AI score0.05985EPSS
SaveExploits3References3
Prion
Prion
•added 2010/12/02 4:22 p.m.•32 views

Buffer overflow

Buffer overflow in the inmod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to the comment box...

9.3CVSS7.6AI score0.05985EPSS
SaveExploits3References3Affected Software1
CVE
CVE
•added 2010/12/02 4:00 p.m.•94 views

CVE-2010-4371

CVE-2010-4371 is a buffer overflow in Winamp’s in_mod plugin (pre-5.6) exploitable via the comment box. The OpenVAS/NVD records confirm the affected component and version range, with the root cause being a buffer overflow in in_mod. Impact is described as unspecified in the source, and no remedia...

9.3CVSS7AI score0.05985EPSS
SaveExploits3References3Affected Software1
Rows per page
Query Builder