Lucene search
+L

257 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/03/12 12:00 a.m.•5 views

CVE-2006-1155: Undefined Security Weakness

Cross-site scripting XSS vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote attackers to inject arbitrary web script or HTML via the Error parameter in 1 login.asp and 2 default.asp...

4.3CVSS6AI score0.01338EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2005/11/29 2:00 a.m.•33 views

CVE-2004-2604

Cross-site scripting XSS vulnerability in index.php in PHProxy allows remote attackers to inject arbitrary web script or HTML via the error parameter...

5.6AI score0.01938EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/29 12:00 a.m.•3 views

CVE-2004-2604: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in PHProxy allows remote attackers to inject arbitrary web script or HTML via the error parameter...

4.3CVSS6AI score0.01938EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/01 12:00 a.m.•4 views

CVE-2005-3422: Undefined Security Weakness

Cross-site scripting XSS vulnerability in error.asp in ASP Fast Forum allows remote attackers to inject arbitrary web script or HTML via the error parameter...

4.3CVSS6AI score0.01752EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/01 12:00 a.m.•3 views

CVE-2005-3397: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script or HTML via the error parameter to comersusbackofficesupportError.asp. NOTE: the comersusbackofficemessage.asp/message vector is already covered by CVE-2005-2191 item 2...

4.3CVSS6AI score0.01394EPSS
SaveExploits2References1
UbuntuCve
UbuntuCve
•added 2005/09/08 11:03 p.m.•29 views

CVE-2005-2869

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via 1 the Username to libraries/auth/cookie.auth.lib.php or 2 the error parameter to error.php...

4.3CVSS7.3AI score0.05094EPSS
SaveExploits2References1
NVD
NVD
•added 2005/09/08 11:03 p.m.•22 views

CVE-2005-2869

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via 1 the Username to libraries/auth/cookie.auth.lib.php or 2 the error parameter to error.php...

4.3CVSS5.6AI score0.05094EPSS
SaveExploits2References9
OSV
OSV
•added 2005/09/08 11:03 p.m.•8 views

DEBIAN-CVE-2005-2869

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via 1 the Username to libraries/auth/cookie.auth.lib.php or 2 the error parameter to error.php...

4.3CVSS8.1AI score0.05094EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/06/29 12:00 a.m.•4 views

CVE-2005-2077: Undefined Security Weakness

Cross-site scripting XSS vulnerability in error.asp for Hosting Controller allows remote attackers to inject arbitrary web script or HTML via the error parameter...

4.3CVSS6AI score0.03613EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2005/06/14 4:00 a.m.•30 views

CVE-2005-1968

Cross-site scripting XSS vulnerability in ProductCart Ecommerce before 2.7 allows remote attackers to inject arbitrary web script or HTML via the error parameter to techErr.asp...

5.7AI score0.00992EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/06/14 12:00 a.m.•7 views

CVE-2005-1968: Undefined Security Weakness

Cross-site scripting XSS vulnerability in ProductCart Ecommerce before 2.7 allows remote attackers to inject arbitrary web script or HTML via the error parameter to techErr.asp...

4.3CVSS6AI score0.00992EPSS
SaveExploits1References1
NVD
NVD
•added 2005/06/08 4:00 a.m.•24 views

CVE-2005-1968

Cross-site scripting XSS vulnerability in ProductCart Ecommerce before 2.7 allows remote attackers to inject arbitrary web script or HTML via the error parameter to techErr.asp...

4.3CVSS5.7AI score0.00992EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/05/27 12:00 a.m.•4 views

CVE-2004-2105: Undefined Security Weakness

The webacc servlet in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to read arbitrary .htt files via a full pathname in the error parameter...

5CVSS6AI score0.01894EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2005/05/10 4:00 a.m.•20 views

CVE-2004-1844

Cross-site scripting XSS vulnerability in Member Management System 2.1 allows remote attackers to inject arbitrary web script or HTML via 1 the err parameter to error.asp or 2 register.asp...

5.7AI score0.01768EPSS
SaveExploits3References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/02/10 12:00 a.m.•3 views

CVE-2005-0303: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in 1 comersussupportError.asp or 2 comersusbackofficelitesupportError.asp in BackOffice Lite 6.0 and 6.01 allow remote attackers to inject arbitrary web script or HTML via the error parameter...

4.3CVSS5.9AI score0.01164EPSS
SaveExploits0References1
exploitpack
exploitpack
•added 2004/03/20 12:00 a.m.•18 views

Expinion.net Member Management System 2.1 - register.asp?err Cross-Site Scripting

Expinion.net Member Management System 2.1 - register.asp?err Cross-Site Scripting source: https://www.securityfocus.com/bid/9932/info It has been reported that a number of Member Management System scripts are prone to cross-site scripting vulnerabilities. These issues are reportedly due to a...

6.8AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/06/11 12:00 a.m.•3 views

CVE-2002-0586: Undefined Security Weakness

Format string vulnerability in NsPdLog function for the external database driver proxy daemon library libnspd.a of AOLServer 3.0 through 3.4.2 allows remote attackers to execute arbitrary code via the Error or Notice parameters...

7.5CVSS6.6AI score0.02912EPSS
SaveExploits0References1
Rows per page
Query Builder