Lucene search
+L

8125 matches found

Openbugbounty
Openbugbounty
•added 2018/07/03 1:48 a.m.•15 views

forum-auto.ru XSS vulnerability

Open Bug Bounty ID: OBB-639733 Description| Value ---|--- Affected Website:| forum-auto.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2018/07/02 12:54 a.m.•8 views

forum-auto.ru XSS vulnerability

Open Bug Bounty ID: OBB-639365 Description| Value ---|--- Affected Website:| forum-auto.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
CNVD
CNVD
•added 2018/07/02 12:00 a.m.•20 views

Advanced Electron Forum Private Message Module Cross-Site Scripting Vulnerability

Advanced Electron Forum AEF is an online forum system written in PHP.Private Message is one of the personal information modules. A cross-site scripting vulnerability exists in the 'FTP Link' element of the Private Message module in AEF version 1.0.9, which originates from unfiltered content in th...

4.8CVSS5AI score0.00935EPSS
SaveExploits3References1
OSV
OSV
•added 2018/06/29 2:29 p.m.•15 views

CVE-2018-13000

An XSS issue was discovered in Advanced Electron Forum AEF v1.0.9. A persistent XSS vulnerability is located in the FTP Link element of the Private Message module. The editor of the private message module allows inserting links without sanitizing the content. This allows remote attackers to injec...

4.8CVSS6AI score0.00935EPSS
SaveExploits3References1
NVD
NVD
•added 2018/06/29 2:29 p.m.•30 views

CVE-2018-13000

An XSS issue was discovered in Advanced Electron Forum AEF v1.0.9. A persistent XSS vulnerability is located in the FTP Link element of the Private Message module. The editor of the private message module allows inserting links without sanitizing the content. This allows remote attackers to injec...

4.8CVSS5.4AI score0.00935EPSS
SaveExploits3References1
Prion
Prion
•added 2018/06/29 2:29 p.m.•29 views

Cross site scripting

An XSS issue was discovered in Advanced Electron Forum AEF v1.0.9. A persistent XSS vulnerability is located in the FTP Link element of the Private Message module. The editor of the private message module allows inserting links without sanitizing the content. This allows remote attackers to injec...

3.5CVSS5.3AI score0.00935EPSS
SaveExploits3References1Affected Software1
Positive Technologies
Positive Technologies
•added 2018/06/29 12:00 a.m.•3 views

PT-2018-11529

Name of the Vulnerable Software and Affected Versions Advanced Electron Forum version 1.0.9 Description A persistent XSS issue is located in the FTP Link element of the Private Message module. The editor of the private message module allows inserting links without sanitizing the content, enabling...

4.8CVSS0.00935EPSS
SaveExploits3References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/29 12:00 a.m.•6 views

CVE-2018-13000: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in Advanced Electron Forum AEF v1.0.9. A persistent XSS vulnerability is located in the FTP Link element of the Private Message module. The editor of the private message module allows inserting links without sanitizing the content. This allows remote attackers to injec...

4.8CVSS5.7AI score0.00935EPSS
SaveExploits3References2
CNVD
CNVD
•added 2018/06/28 12:00 a.m.•15 views

MyBB Group MyBB Access Control Error Vulnerability

MyBB aka MyBulletinBoard is a free and web-based forum software developed by MyBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. An access control error vulnerability exists in the private forums in MyBB Group MyBB. The...

4.3CVSS5.2AI score0.00623EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2018/06/26 2:49 a.m.•11 views

geba-online.de XSS vulnerability

Open Bug Bounty ID: OBB-636741 Description| Value ---|--- Affected Website:| geba-online.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2018/06/23 12:24 a.m.•6 views

forum.phpfrance.com XSS vulnerability

Open Bug Bounty ID: OBB-635556 Description| Value ---|--- Affected Website:| forum.phpfrance.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
Patchstack
Patchstack
•added 2018/06/20 12:00 a.m.•32 views

WordPress wpForo Forum plugin <= 1.4.11 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability found by Ryan Dewhurst Security in WordPress wpForo Forum plugin versions = 1.4.11. Solution Update the WordPress wpForo Forum plugin to the latest available version at least 1.4.12...

6.1CVSS2AI score0.036EPSS
SaveExploits1References1Affected Software1
Openbugbounty
Openbugbounty
•added 2018/06/15 8:50 p.m.•9 views

e-papierosy-forum.pl XSS vulnerability

Open Bug Bounty ID: OBB-632930 Description| Value ---|--- Affected Website:| e-papierosy-forum.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2018/06/10 6:22 p.m.•10 views

forum-auto.ru XSS vulnerability

Open Bug Bounty ID: OBB-629761 Description| Value ---|--- Affected Website:| forum-auto.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2018/06/07 4:20 a.m.•14 views

forumromanum.de XSS vulnerability

Open Bug Bounty ID: OBB-628249 Description| Value ---|--- Affected Website:| forumromanum.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
OSV
OSV
•added 2018/06/04 5:29 p.m.•14 views

CVE-2018-11715

The Recent Threads plugin before 1.1 for MyBB allows XSS via a thread subject...

5.4CVSS5.8AI score0.01683EPSS
SaveExploits5References2
NVD
NVD
•added 2018/06/04 1:29 p.m.•33 views

CVE-2018-11709

wpforogetrequesturi in wpf-includes/functions.php in the wpForo Forum plugin before 1.4.12 for WordPress allows Unauthenticated Reflected Cross-Site Scripting XSS via the URI...

6.1CVSS6.1AI score0.036EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2018/06/04 1:00 p.m.•33 views

CVE-2018-11709

wpforogetrequesturi in wpf-includes/functions.php in the wpForo Forum plugin before 1.4.12 for WordPress allows Unauthenticated Reflected Cross-Site Scripting XSS via the URI...

6.1AI score0.036EPSS
SaveExploits1References3
CVE
CVE
•added 2018/06/04 1:00 p.m.•104 views

CVE-2018-11709

Summary: CVE-2018-11709 affects the WordPress WordPress wpForo Forum plugin (versions

6.1CVSS6AI score0.036EPSS
SaveExploits1References3Affected Software1
Openbugbounty
Openbugbounty
•added 2018/06/04 12:33 p.m.•14 views

pudelzucht.de XSS vulnerability

Open Bug Bounty ID: OBB-627009 Description| Value ---|--- Affected Website:| pudelzucht.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
Rows per page
Query Builder