Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/02/20 1:26 p.m.3 views

CVE-2025-40697

Reflected Cross-Site Scripting XSS vulnerability in '/index.php' in Lewe WebMeasure, which allows remote attackers to execute arbitrary code through the 'page' parameter. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of...

5.1CVSS6.2AI score0.00437EPSS
Exploits0References1
NVD
NVD
added 2026/02/19 9:16 a.m.1 views

CVE-2025-40697

Reflected Cross-Site Scripting XSS vulnerability in '/index.php' in Lewe WebMeasure, which allows remote attackers to execute arbitrary code through the 'page' parameter. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of...

5.1CVSS0.00437EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/19 8:44 a.m.0 views

CVE-2025-40697 Reflected Cross-Site Scripting (XSS) in Lewe WebMeasure

Reflected Cross-Site Scripting XSS vulnerability in '/index.php' in Lewe WebMeasure, which allows remote attackers to execute arbitrary code through the 'page' parameter. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of...

5.1CVSS6.2AI score0.00437EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/19 8:44 a.m.22 views

CVE-2025-40697 Reflected Cross-Site Scripting (XSS) in Lewe WebMeasure

Reflected Cross-Site Scripting XSS vulnerability in '/index.php' in Lewe WebMeasure, which allows remote attackers to execute arbitrary code through the 'page' parameter. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of...

5.1CVSS0.00437EPSS
Exploits0References1
CVE
CVE
added 2026/02/19 8:44 a.m.6 views

CVE-2025-40697

CVE-2025-40697 describes a Reflected XSS in Lewe WebMeasure affecting the endpoint /index.php via the page parameter. The vulnerability could allow an attacker to execute arbitrary code in the context of a user session, with potential data exposure such as session cookies and the ability to perfo...

5.1CVSS6.2AI score0.00437EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/19 12:0 a.m.1 views

PT-2026-20774

Reflected Cross-Site Scripting XSS vulnerability in '/index.php' in Lewe WebMeasure, which allows remote attackers to execute arbitrary code through the 'page' parameter. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of...

5.1CVSS6.2AI score0.00437EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/19 12:0 a.m.2 views

Lewe WebMeasure 跨站脚本漏洞

Lewe WebMeasure is a web traffic statistics and performance monitoring tool developed by Lewe Corporation. Lewe WebMeasure has a cross-site scripting vulnerability, which stems from improper handling of the page parameter in the index.php file. This vulnerability could allow remote attackers to...

5.1CVSS6AI score0.00437EPSS
Exploits0References1
Rows per page
Query Builder