Lucene search
+L

16 matches found

CNVD
CNVD
•added 2020/10/20 12:00 a.m.•8 views

United Planet Intrexx Professional Cross-Site Scripting Vulnerability

United Planet Intrexx Professional is an integrated cross-platform development environment from United Planet Germany. It enables the creation of Web-based applications, enterprise portals, intranet portals and more. A cross-site scripting vulnerability exists in United Planet Intrexx Professiona...

6.1CVSS5.9AI score0.00829EPSS
SaveExploits0References1
NVD
NVD
•added 2020/01/31 11:15 p.m.•27 views

CVE-2014-2025

Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it v...

9.8CVSS9.7AI score0.03968EPSS
SaveExploits0References3
Prion
Prion
•added 2020/01/31 11:15 p.m.•32 views

Unrestricted file upload

Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it v...

7.5CVSS8.3AI score0.03968EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2020/01/31 11:15 p.m.•11 views

CVE-2014-2025

Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it v...

9.8CVSS6.3AI score0.03968EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2020/01/31 10:14 p.m.•38 views

CVE-2014-2025

Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it v...

9.8AI score0.03968EPSS
SaveExploits0References3
CVE
CVE
•added 2020/01/31 10:14 p.m.•168 views

CVE-2014-2025

CVE-2014-2025 concerns an Unrestricted File Upload vulnerability in United Planet Intrexx Professional, affecting 5.2 (before Online Update 0905) and 6.x (before Online Update 10). The flaw allows remote code execution by uploading a file with an executable extension and then accessing it via unk...

9.8CVSS9.6AI score0.03968EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/31 12:00 a.m.•3 views

CVE-2014-2025: Unrestricted Upload of File with Dangerous Type

Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it v...

9.8CVSS8.8AI score0.03968EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/01/31 12:00 a.m.•5 views

PT-2020-7617

Name of the Vulnerable Software and Affected Versions United Planet Intrexx Professional versions prior to 5.2 Online Update 0905 United Planet Intrexx Professional versions 6.x prior to 6.0 Online Update 10 Description The issue allows remote attackers to execute arbitrary code by uploading a fi...

9.8CVSS0.03968EPSS
SaveExploits0References4
securityvulns
securityvulns
•added 2014/12/22 12:00 a.m.•120 views

CVE-2014-2026 Reflected Cross-Site Scripting (XSS) in "Intrexx Professional"

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2014-2026 =================== "Reflected Cross-Site Scripting XSS" CWE-79 vulnerability in "Intrexx Professional" product Vendor =================== United Planet GmbH Product =================== "Intrexx is an integrated cross-platform developmen...

4.3CVSS0.3AI score0.01936EPSS
SaveExploits0
securityvulns
securityvulns
•added 2014/12/22 12:00 a.m.•173 views

CVE-2014-2025 Remote Code Execution (RCE) in "Intrexx Professional"

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2014-2025 =================== "Remote Code Execution RCE via Unrestricted File Upload" CWE-434 vulnerability in "Intrexx Professional" product Vendor =================== United Planet GmbH Product =================== "Intrexx is an integrated...

1.6AI score0.03968EPSS
SaveExploits0
Prion
Prion
•added 2014/12/19 3:59 p.m.•23 views

Cross site scripting

Cross-site scripting XSS vulnerability in the search functionality in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to inject arbitrary web script or HTML via the request parameter...

4.3CVSS6.2AI score0.01936EPSS
SaveExploits0References5Affected Software1
attackerkb
attackerkb
•added 2014/12/19 3:59 p.m.•9 views

CVE-2014-2026

Cross-site scripting XSS vulnerability in the search functionality in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to inject arbitrary web script or HTML via the request parameter...

4.3CVSS5.8AI score0.01936EPSS
SaveExploits0References7
CVE
CVE
•added 2014/12/19 3:00 p.m.•70 views

CVE-2014-2026

The CVE-2014-2026 entry concerns United Planet Intrexx Professional (5.2 prior to Online Update 0905; 6.x prior to Online Update 10). The vulnerability is a reflected Cross-Site Scripting (XSS) in the search functionality, allowing an attacker to inject arbitrary script/HTML via the request param...

4.3CVSS5.9AI score0.01936EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2014/12/19 3:00 p.m.•37 views

CVE-2014-2026

Cross-site scripting XSS vulnerability in the search functionality in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to inject arbitrary web script or HTML via the request parameter...

5.7AI score0.01936EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2014/12/19 12:00 a.m.•2 views

PT-2014-4438

Name of the Vulnerable Software and Affected Versions United Planet Intrexx Professional versions prior to 5.2 Online Update 0905 United Planet Intrexx Professional versions 6.x prior to 6.0 Online Update 10 Description A cross-site scripting XSS issue exists in the search functionality, allowing...

4.3CVSS0.01936EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/12/19 12:00 a.m.•4 views

CVE-2014-2026: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the search functionality in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to inject arbitrary web script or HTML via the request parameter...

4.3CVSS6AI score0.01936EPSS
SaveExploits0References2
Rows per page
Query Builder