Lucene search
+L

78 matches found

Positive Technologies
Positive Technologies
•added 2023/12/02 12:00 a.m.•19 views

PT-2023-32679 · Thecosy · Thecosy Icecms

Name of the Vulnerable Software and Affected Versions: Thecosy IceCMS version 2.0.1 Description: A vulnerability was found in the User Comment Handler component, affecting unknown code of the file /planet. The manipulation leads to cross site scripting. The attack can be initiated remotely...

6.1CVSS6.4AI score0.00608EPSS
SaveExploits1References5
NVD
NVD
•added 2023/09/17 7:15 a.m.•34 views

CVE-2023-5024

A vulnerability was found in Planno 23.04.04. It has been classified as problematic. This affects an unknown part of the component Comment Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

4.8CVSS4.1AI score0.00661EPSS
SaveExploits2References4
Prion
Prion
•added 2023/09/17 7:15 a.m.•31 views

Cross site scripting

A vulnerability was found in Planno 23.04.04. It has been classified as problematic. This affects an unknown part of the component Comment Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

4CVSS4.8AI score0.00661EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
•added 2023/09/17 6:31 a.m.•45 views

CVE-2023-5024 Planno Comment cross site scripting

A vulnerability was found in Planno 23.04.04. It has been classified as problematic. This affects an unknown part of the component Comment Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

4CVSS5.2AI score0.00661EPSS
SaveExploits2References4
Vulnrichment
Vulnrichment
•added 2023/09/17 6:31 a.m.•8 views

CVE-2023-5024 Planno Comment cross site scripting

A vulnerability was found in Planno 23.04.04. It has been classified as problematic. This affects an unknown part of the component Comment Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

4CVSS6.2AI score0.00661EPSS
SaveExploits2References4
CNNVD
CNNVD
•added 2023/09/17 12:00 a.m.•11 views

Planno Cross-Site Scripting Vulnerability

Planno is an AI-powered solar development platform from Planno. A cross-site scripting vulnerability exists in Planno version 23.04.04, which stems from a cross-site scripting XSS vulnerability in the component Comment Handler...

4.8CVSS5.8AI score0.00661EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/17 12:00 a.m.•4 views

CVE-2023-5024: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Planno 23.04.04. It has been classified as problematic. This affects an unknown part of the component Comment Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

4.8CVSS3.7AI score0.00661EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2023/09/16 12:00 a.m.•14 views

PT-2023-31503 · Planno · Planno

Name of the Vulnerable Software and Affected Versions: Planno version 23.04.04 Description: A problematic issue affects an unknown part of the component Comment Handler, leading to cross-site scripting. The manipulation can be initiated remotely. Recommendations: For Planno version 23.04.04, at t...

4.8CVSS6.6AI score0.00661EPSS
SaveExploits2References7
OSV
OSV
•added 2023/01/13 1:15 p.m.•29 views

CVE-2023-0287

A vulnerability was found in ityouknow favorites-web. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Comment Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the...

5.4CVSS3.5AI score0.00522EPSS
SaveExploits1References3
NVD
NVD
•added 2023/01/13 1:15 p.m.•33 views

CVE-2023-0287

A vulnerability was found in ityouknow favorites-web. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Comment Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the...

5.4CVSS4.2AI score0.00522EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/01/13 12:40 p.m.•48 views

CVE-2023-0287 ityouknow favorites-web Comment cross site scripting

A vulnerability was found in ityouknow favorites-web. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Comment Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the...

4CVSS5.5AI score0.00522EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/01/13 12:00 a.m.•21 views

PT-2023-16144 · Unknown · Ityouknow Favorites-Web

Name of the Vulnerable Software and Affected Versions: ityouknow favorites-web affected versions not specified Description: A vulnerability was found in the Comment Handler component of ityouknow favorites-web, which can lead to cross-site scripting. The attack may be launched remotely. The issue...

5.4CVSS6.5AI score0.00522EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2023/01/13 12:00 a.m.•15 views

favorites-web 跨站脚本漏洞

Favorites-web Cloud Favorites is an open source website built with Spring Boot by the individual developer Pure Smile ityouknow. A cross-site scripting vulnerability exists in favorites-web, which stems from some unknown functionality in its Comment Handler component that allows an attacker to...

5.4CVSS4AI score0.00522EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/13 12:00 a.m.•1 views

CVE-2023-0287: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in ityouknow favorites-web. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Comment Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the...

5.4CVSS3.8AI score0.00522EPSS
SaveExploits1References2
NVD
NVD
•added 2022/12/10 7:15 p.m.•30 views

CVE-2022-4397

A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...

6.5CVSS0.00249EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/12/10 12:00 a.m.•37 views

CVE-2022-4397 morontt zend-blog-number-2 Comment Comment.php cross-site request forgery

A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...

4.3CVSS5AI score0.00249EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/10 12:00 a.m.•3 views

CVE-2022-4397: Incorrect Authorization

A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...

6.5CVSS5AI score0.00249EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/12/10 12:00 a.m.•22 views

PT-2022-27050 · Unknown · Morontt Zend-Blog-Number-2

Name of the Vulnerable Software and Affected Versions: morontt zend-blog-number-2 affected versions not specified Description: A vulnerability was found in the component Comment Handler, specifically in the file application/forms/Comment.php. The manipulation leads to cross-site request forgery. ...

6.5CVSS6.3AI score0.00249EPSS
SaveExploits0References6
Rows per page
Query Builder