Lucene search
K

5077 matches found

NVD
NVD
added 2021/03/22 3:15 p.m.13 views

CVE-2021-27308

A cross-site scripting XSS vulnerability in the admin login panel in 4images version 1.8 allows remote attackers to inject JavaScript via the "redirect" parameter...

4.8CVSS0.02204EPSS
Exploits4References2
Prion
Prion
added 2021/03/22 3:15 p.m.15 views

Cross site scripting

A cross-site scripting XSS vulnerability in the admin login panel in 4images version 1.8 allows remote attackers to inject JavaScript via the "redirect" parameter...

3.5CVSS4.9AI score0.02204EPSS
Exploits4References2Affected Software1
Cvelist
Cvelist
added 2021/03/22 2:49 p.m.16 views

CVE-2021-27308

A cross-site scripting XSS vulnerability in the admin login panel in 4images version 1.8 allows remote attackers to inject JavaScript via the "redirect" parameter...

5.1AI score0.02204EPSS
Exploits4References2
CNVD
CNVD
added 2021/03/22 12:0 a.m.6 views

FUDForum cross-site scripting vulnerability (CNVD-2021-22864)

FUDforum is an open source forum system built on PHP+MySQL/PostgreSQL. A cross-site scripting vulnerability exists in FUDForum 3.1.0. An attacker can exploit this vulnerability to inject JavaScript via the author parameter in index.php...

6.1CVSS5.8AI score0.06396EPSS
Exploits4References1
CNVD
CNVD
added 2021/03/22 12:0 a.m.7 views

FUDForum cross-site scripting vulnerability (CNVD-2021-22862)

FUDforum is an open source forum system built on PHP+MySQL/PostgreSQL. A cross-site scripting vulnerability exists in FUDForum 3.1.0. An attacker can exploit this vulnerability to inject JavaScript via the srch parameter in index.php...

6.1CVSS5.8AI score0.07604EPSS
Exploits4References1
CNNVD
CNNVD
added 2021/03/22 12:0 a.m.3 views

Piyush Patil 4images 跨站脚本漏洞

4images is an open source image management system. 4images 1.8 version of the cross-site scripting vulnerability , the vulnerability stems from the redirect parameter does not do effective filtering of user input , a remote attacker can use this vulnerability to inject JavaScript...

4.8CVSS5.3AI score0.02204EPSS
Exploits4References5
NVD
NVD
added 2021/03/19 7:15 p.m.26 views

CVE-2021-27520

A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter...

6.1CVSS0.06396EPSS
Exploits4References2
Prion
Prion
added 2021/03/19 7:15 p.m.14 views

Cross site scripting

A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter...

4.3CVSS5.9AI score0.07604EPSS
Exploits4References2Affected Software1
CVE
CVE
added 2021/03/19 6:54 p.m.113 views

CVE-2021-27519

CVE-2021-27519 – FUDForum 3.1.0 Cross-Site Scripting Affected software: FUDForum 3.1.0. Issue: an XSS vulnerability exists in index.php where user input in the “srch” parameter is not properly sanitized, allowing remote attackers to inject JavaScript. Impact: as described, successful exploitation...

6.1CVSS5.9AI score0.07604EPSS
Exploits4References2Affected Software1
CNVD
CNVD
added 2021/03/19 12:0 a.m.9 views

Seo Panel Cross-Site Scripting Vulnerability (CNVD-2021-22151)

SEO Panel is a free, open source SEO optimization software. A cross-site scripting vulnerability exists in Seo Panel 4.8.0. A remote attacker can exploit this vulnerability to inject JavaScript via the alerts.php fromtime parameter...

4.8CVSS6AI score0.01933EPSS
Exploits3References1
CNVD
CNVD
added 2021/03/19 12:0 a.m.6 views

Seo Panel Cross-Site Scripting Vulnerability (CNVD-2021-22150)

SEO Panel is a free, open source SEO optimization software. A cross-site scripting vulnerability exists in Seo Panel 4.8.0. A remote attacker can exploit this vulnerability to inject JavaScript via the settings.php category parameter...

4.8CVSS5.9AI score0.01871EPSS
Exploits4References1
CNVD
CNVD
added 2021/03/19 12:0 a.m.8 views

Seo Panel Cross-Site Scripting Vulnerability (CNVD-2021-19686)

SEO Panel is a free, open source SEO optimization software. A cross-site scripting vulnerability exists in Seo Panel 4.8.0. A remote attacker can exploit this vulnerability to inject JavaScript via the archive.php searchname parameter...

4.8CVSS5.9AI score0.01871EPSS
Exploits4References1
CNNVD
CNNVD
added 2021/03/19 12:0 a.m.3 views

FUDForum 跨站脚本漏洞

FUDforum is an open source forum system built on PHP+MySQL/PostgreSQL. A cross-site scripting vulnerability exists in FUDForum 3.1.0. An attacker can exploit this vulnerability to inject JavaScript via the author parameter in index.php...

6.1CVSS5.3AI score0.06396EPSS
Exploits4References5
NVD
NVD
added 2021/03/18 12:15 p.m.10 views

CVE-2021-28418

A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the "category" parameter...

4.8CVSS0.01871EPSS
Exploits4References2
OSV
OSV
added 2021/03/18 12:15 p.m.12 views

CVE-2021-28418

A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the "category" parameter...

4.8CVSS5.8AI score
Exploits0References2
Prion
Prion
added 2021/03/18 12:15 p.m.15 views

Cross site scripting

A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and the "searchname" parameter...

3.5CVSS4.9AI score0.01871EPSS
Exploits4References2Affected Software1
Prion
Prion
added 2021/03/18 12:15 p.m.8 views

Cross site scripting

A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via alerts.php and the "fromtime" parameter...

3.5CVSS4.9AI score0.01933EPSS
Exploits3References2Affected Software1
CVE
CVE
added 2021/03/18 11:58 a.m.84 views

CVE-2021-28420

CVE-2021-28420 is a cross-site scripting (XSS) vulnerability affecting Seo Panel 4.8.0. The issue allows remote attackers to inject JavaScript through alerts.php via the from_time parameter. Several connected sources (Red Hat CVE entry, OSV, CNVD, CVE lists, Exploit-DB) confirm the same flaw and ...

4.8CVSS4.8AI score0.01933EPSS
Exploits3References2Affected Software1
Cvelist
Cvelist
added 2021/03/18 11:57 a.m.13 views

CVE-2021-28418

A cross-site scripting XSS issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the "category" parameter...

5.2AI score0.01871EPSS
Exploits4References2
CVE
CVE
added 2021/03/18 11:57 a.m.92 views

CVE-2021-28418

CVE-2021-28418 describes a cross-site scripting (XSS) vulnerability in Seo Panel 4.8.0 that allows a remote attacker to inject JavaScript via the settings.php and the category parameter. Multiple connected sources corroborate the issue (NVD/OSV/CNVD/CVELIST, Exploit-DB). Exploit-DB references a r...

4.8CVSS4.8AI score0.01871EPSS
Exploits4References2Affected Software1
Rows per page
Query Builder