Lucene search
+L

1488 matches found

Prion
Prion
•added 2023/08/30 2:15 p.m.•25 views

Cross site scripting

phpjabbers Business Directory Script 3.2 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

5.8CVSS6AI score0.00434EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2023/08/30 12:00 a.m.•19 views

Business Directory Script 跨站脚本漏洞

Business Directory Script is an easy to use PHP directory script for anyone who wants to create a business directory. A cross-site scripting vulnerability exists in phpjabbers Business Directory Script version 3.2, which stems from vulnerability to cross-site scripting XSS attacks via the keyword...

6.1CVSS5.9AI score0.00434EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/08/30 12:00 a.m.•20 views

Business Directory Script 跨站脚本漏洞

Business Directory Script is an easy to use PHP directory script for anyone who wants to create a business directory. A cross-site scripting vulnerability exists in phpjabbers Business Directory Script version 3.2, which stems from vulnerability to cross-site scripting XSS attacks via the keyword...

6.1CVSS5.9AI score0.01139EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/30 12:00 a.m.•2 views

CVE-2023-41538: Improper Neutralization of Input During Web Page Generation

phpjabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

6.1CVSS6.4AI score0.01139EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/30 12:00 a.m.•6 views

CVE-2023-41537: Improper Neutralization of Input During Web Page Generation

phpjabbers Business Directory Script 3.2 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

6.1CVSS6.4AI score0.00434EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/08/30 12:00 a.m.•45 views

CVE-2023-41537

phpjabbers Business Directory Script 3.2 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

6.2AI score0.00434EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2023/08/30 12:00 a.m.•23 views

CVE-2023-41537

phpjabbers Business Directory Script 3.2 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

6AI score0.00434EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/08/30 12:00 a.m.•48 views

CVE-2023-41538

phpjabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

6.2AI score0.01139EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/08/30 12:00 a.m.•25 views

PT-2023-27965 · Phpjabbers · Phpjabbers Php Forum Script

Name of the Vulnerable Software and Affected Versions: phpjabbers PHP Forum Script version 3.0 Description: The issue concerns a Cross Site Scripting XSS flaw via the keyword parameter. This allows for potential malicious script injection, affecting the security of the application. Recommendation...

6.1CVSS6.2AI score0.01139EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2023/08/03 5:15 p.m.•16 views

CVE-2023-36213

SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via the keyword parameter of the search function...

9.8CVSS7.5AI score0.01407EPSS
SaveExploits1References3
OSV
OSV
•added 2023/08/03 5:15 p.m.•15 views

CVE-2023-36213

SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via the keyword parameter of the search function...

9.8CVSS5.9AI score0.01407EPSS
SaveExploits1References2
Prion
Prion
•added 2023/08/03 5:15 p.m.•26 views

Sql injection

SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via the keyword parameter of the search function...

7.5CVSS9.8AI score0.01407EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2023/08/03 12:00 a.m.•17 views

MotoCMS SQL注入漏洞

MotoCMS is a simple website builder from MotoCMS. MotoCMS version v3.4.3 suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements. The vulnerability can be exploited by an attacker to gain privileges via the keyword...

9.8CVSS8.4AI score0.01407EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/03 12:00 a.m.•5 views

CVE-2023-36213: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via the keyword parameter of the search function...

9.8CVSS8.3AI score0.01407EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/08/03 12:00 a.m.•5 views

PT-2023-25484

Name of the Vulnerable Software and Affected Versions MotoCMS version 3.4.3 Description A SQL injection issue allows a remote attacker to gain privileges via the keyword parameter of the search function. This enables the attacker to potentially access or manipulate sensitive data. Recommendations...

9.8CVSS0.01407EPSS
SaveExploits1References6
OSV
OSV
•added 2023/08/01 5:15 p.m.•12 views

CVE-2023-36210

MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection SSTI vulnerability via the keyword parameter...

9.8CVSS5.8AI score0.30868EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/01 12:00 a.m.•3 views

CVE-2023-36210: Improper Neutralization of Special Elements in Output Used by a Downstream Component

MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection SSTI vulnerability via the keyword parameter...

9.8CVSS8.2AI score0.30868EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/08/01 12:00 a.m.•14 views

CVE-2023-36210

MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection SSTI vulnerability via the keyword parameter...

7.6AI score0.30868EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/08/01 12:00 a.m.•35 views

CVE-2023-36210

MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection SSTI vulnerability via the keyword parameter...

9.8AI score0.30868EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/08/01 12:00 a.m.•3 views

PT-2023-25481

Name of the Vulnerable Software and Affected Versions MotoCMS version 3.4.3 Description A Server-Side Template Injection SSTI issue was found in the Store Category Template of MotoCMS. This issue is related to the keyword parameter. Recommendations For MotoCMS version 3.4.3, consider restricting...

9.8CVSS0.30868EPSS
SaveExploits1References6
Rows per page
Query Builder