CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

Prion•added 2023/07/13 5:15 p.m.•17 views

Cross site scripting

4.3CVSS5AI score0.00399EPSS

Cvelist•added 2023/07/13 12:0 a.m.•21 views

CVE-2023-37786

5.3AI score0.00456EPSS

Cvelist•added 2023/07/13 12:0 a.m.•24 views

CVE-2023-37787

5.3AI score0.00399EPSS

OSV•added 2023/07/13 12:0 a.m.•20 views

CVE-2023-37786

4.8CVSS6.2AI score0.00456EPSS

Exploits1References3

CVE•added 2023/07/13 12:0 a.m.•60 views

CVE-2023-37786

Geeklog v2.2.2 is affected by multiple cross-site scripting (XSS) vulnerabilities that allow an attacker to inject arbitrary web scripts or HTML via crafted payloads in the Mail Settings[backend], Mail Settings[host], Mail Settings[port], and Mail Settings[auth] parameters of the /admin/configura...

4.8CVSS5.1AI score0.00456EPSS

Vulnrichment•added 2023/07/13 12:0 a.m.•12 views

CVE-2023-37787

6.1AI score0.00399EPSS

Vulnrichment•added 2023/07/13 12:0 a.m.•20 views

CVE-2023-37786

6.1AI score0.00456EPSS

CNNVD•added 2023/07/13 12:0 a.m.•5 views

Geeklog 跨站脚本漏洞

Geeklog is free and open source blogging software. A cross-site scripting vulnerability exists in Geeklog router.php due to an incorrect validation of user-supplied input by the publichtml/admin/router.php script. An attacker could exploit the vulnerability to steal the victim's cookie-based...

4.8CVSS6.3AI score0.00399EPSS

Exploits1References2

Positive Technologies•added 2023/07/13 12:0 a.m.•6 views

PT-2023-26107 · Geeklog · Geeklog

Name of the Vulnerable Software and Affected Versions: Geeklog version 2.2.2 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Rule and Route parameters of "/admin/router.php" API endpoint. This enables the execution of...

4.8CVSS5.5AI score0.00399EPSS

Exploits1References6

CVE•added 2023/07/13 12:0 a.m.•56 views

CVE-2023-37787

Geeklog v2.2.2 is affected by multiple cross-site scripting (XSS) vulnerabilities that allow an attacker to run arbitrary web scripts or HTML by injecting a crafted payload into the Rule and Route parameters of /admin/router.php. Root cause: improper validation of user-supplied input in router.ph...

4.8CVSS5.1AI score0.00399EPSS

0day.today•added 2020/04/28 12:0 a.m.•32 views

Geeklog 2.2.1 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Information -------------------- Advisory by Netsparker Name: Cross-Site Scripting Vulnerability in Geeklog Affected Software: Geeklog Affected Versions: 2.2.1 Vendor Homepage: https://www.geeklog.net/ Vulnerability Type: Cross-Site Scripting...

0day.today•added 2020/04/28 12:0 a.m.•45 views

Geeklog 2.2.1 SQL Injection Vulnerability

Exploit for php platform in category web applications Information -------------------- Advisory by Netsparker Name: Blind SQL Injection Vulnerability in Geeklog Affected Software: Geeklog Affected Versions: 2.2.1 Vendor Homepage: https://www.geeklog.net/ Vulnerability Type: Blind SQL Injection...

Packet Storm•added 2020/04/27 12:0 a.m.•114 views

Geeklog 2.2.1 Cross Site Scripting

Information -------------------- Advisory by Netsparker Name: Cross-Site Scripting Vulnerability in Geeklog Affected Software: Geeklog Affected Versions: 2.2.1 Vendor Homepage: https://www.geeklog.net/ Vulnerability Type: Cross-Site Scripting Severity: Important Status: Fixed CVSS Score 3.0: 7.4...

Packet Storm•added 2020/04/27 12:0 a.m.•121 views

Geeklog 2.2.1 SQL Injection

Information -------------------- Advisory by Netsparker Name: Blind SQL Injection Vulnerability in Geeklog Affected Software: Geeklog Affected Versions: 2.2.1 Vendor Homepage: https://www.geeklog.net/ Vulnerability Type: Blind SQL Injection Severity: Critical Status: Fixed CVSS Score 3.0: 8.6 Hig...