Lucene search
+L

6 matches found

NVD
NVD
•added 2026/01/20 1:16 p.m.•24 views

CVE-2026-1183

HTML injection vulnerability in multiple Botble products such as TransP, Athena, Martfury, and Homzen, consisting of an HTML injection due to a lack of proper validation of user input by sending a request to '/search' using the 'q' parameter...

5.1CVSS0.00304EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/20 12:09 p.m.•9 views

CVE-2026-1183

HTML injection vulnerability in multiple Botble products such as TransP, Athena, Martfury, and Homzen, consisting of an HTML injection due to a lack of proper validation of user input by sending a request to '/search' using the 'q' parameter...

5.1CVSS5.4AI score0.00304EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/01/20 12:09 p.m.•12 views

CVE-2026-1183 HTML injection in multiple Botble products

HTML injection vulnerability in multiple Botble products such as TransP, Athena, Martfury, and Homzen, consisting of an HTML injection due to a lack of proper validation of user input by sending a request to '/search' using the 'q' parameter...

5.1CVSS5.8AI score0.00304EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/20 12:00 a.m.•20 views

Botble’s various products have cross-site scripting vulnerabilities

Botble TransP is a product of the Vietnam-based Botble company. Botble TransP is a system designed for logistics, express delivery, and freight management. Botble Athena is a content management platform. Botble Martfury is a multi-merchant e-commerce system. Several products of Botble have...

5.1CVSS5.7AI score0.00304EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/20 12:00 a.m.•2 views

CVE-2026-1183: Improper Neutralization of Input During Web Page Generation

HTML injection vulnerability in multiple Botble products such as TransP, Athena, Martfury, and Homzen, consisting of an HTML injection due to a lack of proper validation of user input by sending a request to '/search' using the 'q' parameter...

5.1CVSS5.8AI score0.00304EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/20 12:00 a.m.•20 views

PT-2026-3554

HTML injection vulnerability in multiple Botble products such as TransP, Athena, Martfury, and Homzen, consisting of an HTML injection due to a lack of proper validation of user input by sending a request to '/search' using the 'q' parameter...

5.1CVSS5.5AI score0.00304EPSS
SaveExploits0References2
Rows per page
Query Builder