Lucene search
+L

8 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2018-17248

Malware in sbrugna...

6.1CVSS6.3AI score0.02069EPSS
SaveExploits5References3
CNVD
CNVD
•added 2018/01/18 12:00 a.m.•15 views

FoxSash ImgHosting Search Engine Cross-Site Scripting Vulnerability

FoxSash ImgHosting is a set of scripts for online image hosting. search engine is one of the search engines. A cross-site scripting vulnerability exists in the search engine in FoxSash ImgHosting version 1.5. A remote attacker can exploit this vulnerability by sending the 'search' parameter to th...

6.1CVSS6.4AI score0.02069EPSS
SaveExploits5References1
OSV
OSV
•added 2018/01/15 4:29 p.m.•12 views

CVE-2018-5479

FoxSash ImgHosting 1.5 according to footer information is vulnerable to XSS attacks. The affected function is its search engine via the search parameter to the default URI. Since there is an user/admin login interface, it's possible for attackers to steal sessions of users and thus admins. By...

6.1CVSS5.8AI score0.02069EPSS
SaveExploits5References1
NVD
NVD
•added 2018/01/15 4:29 p.m.•39 views

CVE-2018-5479

FoxSash ImgHosting 1.5 according to footer information is vulnerable to XSS attacks. The affected function is its search engine via the search parameter to the default URI. Since there is an user/admin login interface, it's possible for attackers to steal sessions of users and thus admins. By...

6.1CVSS6.2AI score0.02069EPSS
SaveExploits5References1
Cvelist
Cvelist
•added 2018/01/15 4:00 p.m.•46 views

CVE-2018-5479

FoxSash ImgHosting 1.5 according to footer information is vulnerable to XSS attacks. The affected function is its search engine via the search parameter to the default URI. Since there is an user/admin login interface, it's possible for attackers to steal sessions of users and thus admins. By...

6.2AI score0.02069EPSS
SaveExploits5References1
CVE
CVE
•added 2018/01/15 4:00 p.m.•67 views

CVE-2018-5479

FoxSash ImgHosting 1.5 (search engine) is vulnerable to cross-site scripting via the search parameter in the default URI. The CVE notes an XSS impact that can lead to session theft of users and admins when a crafted URL is visited. Several connected sources (CNVD/CNVD-2018-04325, NVD entry, and e...

6.1CVSS6.1AI score0.02069EPSS
SaveExploits5References1Affected Software1
Positive Technologies
Positive Technologies
•added 2018/01/15 12:00 a.m.•4 views

PT-2018-16984

Name of the Vulnerable Software and Affected Versions FoxSash ImgHosting version 1.5 Description The issue allows for XSS attacks, specifically through the search engine function via the search parameter to the default URI. This could enable attackers to steal user and admin sessions by sending...

6.1CVSS0.02069EPSS
SaveExploits5References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/15 12:00 a.m.•5 views

CVE-2018-5479: Improper Neutralization of Input During Web Page Generation

FoxSash ImgHosting 1.5 according to footer information is vulnerable to XSS attacks. The affected function is its search engine via the search parameter to the default URI. Since there is an user/admin login interface, it's possible for attackers to steal sessions of users and thus admins. By...

6.1CVSS6.3AI score0.02069EPSS
SaveExploits5References2
Rows per page
Query Builder