Lucene search
+L

257 matches found

securityvulns
securityvulns
•added 2006/12/30 12:00 a.m.•61 views

XSS in script Mobilelib GOLD v2

///////////////////////////////////// // XSS in script Mobilelib GOLD v2 // //////////////////////////////////// Found By: viP HaCKEr Tame : AL-GaRNi Vendor: http://www.ac4p.com Software: Mobilelib GOLD GOLD v2 google : "Powered by ac4p.com" :::::::::::::::::::::::::::::::::::::: Description: Lin...

0.5AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/12/21 12:00 a.m.•4 views

CVE-2006-6695: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index.php in Carsen Klock TextSend 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 error or 2 success parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party...

6.8CVSS5.9AI score0.01143EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/12/07 12:00 a.m.•5 views

CVE-2006-6364: Undefined Security Weakness

Cross-site scripting XSS vulnerability in error.php in Inside Systems Mail ISMail 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter...

6.8CVSS6AI score0.02092EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/11/03 12:00 a.m.•4 views

CVE-2006-5653: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the errorHTML function in the index script in Sun Java System Messenger Express 6 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: this issue might be related to CVE-2006-5486, however due to the vagueness of t...

4.3CVSS6.1AI score0.04815EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2006/11/03 12:00 a.m.•61 views

CVE-2006-5653

Cross-site scripting XSS vulnerability in the errorHTML function in the index script in Sun Java System Messenger Express 6 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: this issue might be related to CVE-2006-5486, however due to the vagueness of t...

5.4AI score0.04815EPSS
SaveExploits2References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/09/25 12:00 a.m.•5 views

CVE-2006-4973: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Default.aspx in Perpetual Motion Interactive Systems DotNetNuke before 3.3.5, and 4.x before 4.3.5, allows remote attackers to inject arbitrary HTML via the error parameter...

4.3CVSS6AI score0.01892EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/09/19 12:00 a.m.•6 views

CVE-2006-4894: Undefined Security Weakness

Cross-site scripting XSS vulnerability in forms/lostpassword.php in iDevSpot NixieAffiliate 1.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter...

4.3CVSS6AI score0.04023EPSS
SaveExploits2References1
CVE
CVE
•added 2006/06/21 1:00 a.m.•67 views

CVE-2006-3103

CVE-2006-3103 describes a cross-site scripting (XSS) vulnerability in Bitweaver 1.3, allowing remote attackers to inject arbitrary web script or HTML via (1) the error parameter in users/login.php and (2) the feedback parameter in articles/index.php. The connected records confirm Bitweaver as the...

4.3CVSS5.7AI score0.04738EPSS
SaveExploits2References9Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/06/21 12:00 a.m.•4 views

CVE-2006-3101: Undefined Security Weakness

Cross-site scripting XSS vulnerability in LogonProxy.cgi in Cisco Secure ACS for UNIX 2.3 allows remote attackers to inject arbitrary web script or HTML via the 1 error, 2 SSL, and 3 Ok parameters...

4.3CVSS6AI score0.24003EPSS
SaveExploits2References1
NVD
NVD
•added 2006/05/09 10:02 a.m.•24 views

CVE-2006-2258

Cross-site scripting XSS vulnerability in Logon.asp in MaxxSchedule 1.0 allows remote attackers to inject arbitrary web script or HTML via the Error parameter...

2.6CVSS5.7AI score0.01343EPSS
SaveExploits1References6
Prion
Prion
•added 2006/05/09 10:02 a.m.•22 views

Cross site scripting

Cross-site scripting XSS vulnerability in Logon.asp in MaxxSchedule 1.0 allows remote attackers to inject arbitrary web script or HTML via the Error parameter...

2.6CVSS6.2AI score0.01343EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2006/05/09 10:00 a.m.•33 views

CVE-2006-2258

Cross-site scripting XSS vulnerability in Logon.asp in MaxxSchedule 1.0 allows remote attackers to inject arbitrary web script or HTML via the Error parameter...

5.7AI score0.01343EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/05/09 12:00 a.m.•4 views

CVE-2006-2258: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Logon.asp in MaxxSchedule 1.0 allows remote attackers to inject arbitrary web script or HTML via the Error parameter...

2.6CVSS6AI score0.01343EPSS
SaveExploits1References1
Prion
Prion
•added 2006/04/12 10:02 p.m.•24 views

Cross site scripting

Cross-site scripting XSS vulnerability in login.php in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

2.6CVSS6AI score0.01794EPSS
SaveExploits2References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/04/12 12:00 a.m.•3 views

CVE-2006-1745: Undefined Security Weakness

Cross-site scripting XSS vulnerability in login.php in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

2.6CVSS6AI score0.01794EPSS
SaveExploits2References1
Prion
Prion
•added 2006/03/30 1:06 a.m.•23 views

Cross site scripting

Cross-site scripting XSS vulnerability in PHPKIT 1.6.03 allows remote attackers to inject arbitrary web script or HTML via the error parameter to include.php, possibly due to a problem in login/login.php...

6.8CVSS6AI score0.01457EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2006/03/30 1:00 a.m.•37 views

CVE-2006-1507

Cross-site scripting XSS vulnerability in PHPKIT 1.6.03 allows remote attackers to inject arbitrary web script or HTML via the error parameter to include.php, possibly due to a problem in login/login.php...

5.8AI score0.01457EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/03/30 12:00 a.m.•3 views

CVE-2006-1507: Undefined Security Weakness

Cross-site scripting XSS vulnerability in PHPKIT 1.6.03 allows remote attackers to inject arbitrary web script or HTML via the error parameter to include.php, possibly due to a problem in login/login.php...

6.8CVSS6AI score0.01457EPSS
SaveExploits1References1
NVD
NVD
•added 2006/03/12 8:02 p.m.•27 views

CVE-2006-1155

Cross-site scripting XSS vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote attackers to inject arbitrary web script or HTML via the Error parameter in 1 login.asp and 2 default.asp...

4.3CVSS5.7AI score0.01338EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2006/03/12 8:00 p.m.•35 views

CVE-2006-1155

Cross-site scripting XSS vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote attackers to inject arbitrary web script or HTML via the Error parameter in 1 login.asp and 2 default.asp...

5.7AI score0.01338EPSS
SaveExploits0References7
Rows per page
Query Builder