Lucene search
+L

68 matches found

Friends Of PHP
Friends Of PHP
•added 2010/06/01 12:00 a.m.•25 views

XSS vulnerability exploitable on Internet Explorer

More info at http://htmlpurifier.org/news/2010/0531-4.1.1-released...

4.3CVSS6.4AI score0.02008EPSS
SaveExploits0Affected Software1
securityvulns
securityvulns
•added 2007/07/10 12:00 a.m.•64 views

CodeIgniter 1.5.3 vulnerabilities

CodeIgniter is a powerful PHP framework with a very small footprint, built for PHP coders who need a simple and elegant toolkit to create full-featured web applications. http://www.codeigniter.com 1. sanitizeglobals global variables unsetting By setting e.g. "SERVER=anonymous" cookie in the...

1.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2007/07/10 12:00 a.m.•36 views

codeigniter-multi.txt

CodeIgniter is a powerful PHP framework with a very small footprint, built for PHP coders who need a simple and elegant toolkit to create full-featured web applications. http://www.codeigniter.com 1. sanitizeglobals global variables unsetting By setting e.g. "SERVER=anonymous" cookie in the...

7.4AI score
SaveExploits0
Prion
Prion
•added 2007/06/29 6:30 p.m.•24 views

Cross site scripting

Cross-site scripting XSS vulnerability in smoketests/configForm.php in HTML Purifier before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "unescaped printr output."...

4.3CVSS6.1AI score0.01033EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2007/06/29 6:30 p.m.•28 views

CVE-2007-3498

Cross-site scripting XSS vulnerability in smoketests/configForm.php in HTML Purifier before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "unescaped printr output."...

4.3CVSS5.6AI score0.01033EPSS
SaveExploits0References4
CVE
CVE
•added 2007/06/29 6:00 p.m.•57 views

CVE-2007-3498

The CVE concerns HTML Purifier prior to 2.0.1, specifically a cross-site scripting (XSS) issue in smoketests/configForm.php. The root cause is an unescaped print_r output, enabling remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected software is the HTML Purif...

4.3CVSS5.7AI score0.01033EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2007/06/29 6:00 p.m.•33 views

CVE-2007-3498

Cross-site scripting XSS vulnerability in smoketests/configForm.php in HTML Purifier before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "unescaped printr output."...

5.6AI score0.01033EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/06/29 12:00 a.m.•6 views

CVE-2007-3498: Undefined Security Weakness

Cross-site scripting XSS vulnerability in smoketests/configForm.php in HTML Purifier before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "unescaped printr output."...

4.3CVSS6AI score0.01033EPSS
SaveExploits0References1
Rows per page
Query Builder