Lucene search
K

29 matches found

Vulnrichment
Vulnrichment
added 2024/10/23 12:1 p.m.15 views

CVE-2024-10286 Cross-Site Scripting (XSS) vulnerability in LocalServer

Cross-Site Scripting XSS vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /testmail/index.php, parameter to...

6.1CVSS5.9AI score0.00106EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/23 12:1 p.m.14 views

CVE-2024-10286 Cross-Site Scripting (XSS) vulnerability in LocalServer

Cross-Site Scripting XSS vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /testmail/index.php, parameter to...

6.1CVSS0.00106EPSS
Exploits0References1
CVE
CVE
added 2024/10/23 12:1 p.m.38 views

CVE-2024-10286

LocalServer 1.0.9 is affected by a cross-site scripting (XSS) vulnerability that can be exploited by a remote attacker via a crafted request to /testmail/index.php (vulnerable parameter) to steal session details from an authenticated user. The issue stems from improper input handling in the affec...

6.1CVSS5.9AI score0.00106EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/10/23 12:0 a.m.1 views

LocalServer 跨站脚本漏洞

LocalServer is a web server software for Windows from the individual developer murdas83. A cross-site scripting vulnerability exists in LocalServer version 1.0.9, which can be exploited to obtain sensitive information from a user session via the to parameter on the /testmail/index.php page...

6.1CVSS5.9AI score0.00106EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/10/23 12:0 a.m.2 views

PT-2024-16158 · Unknown · Localserver

Name of the Vulnerable Software and Affected Versions: LocalServer version 1.0.9 Description: A Cross-Site Scripting XSS issue allows a remote user to send a specially crafted query to an authenticated user and steal their session details. This is achieved through the "/testmail/index.php" API...

6.1CVSS5.8AI score0.00106EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/10/23 12:0 a.m.1 views

LocalServer 跨站脚本漏洞

LocalServer is a web server software for Windows by murdas83 Individual Developer. A cross-site scripting vulnerability exists in LocalServer version 1.0.9, which stems from a cross-site scripting XSS vulnerability that could allow a remote user to send a specially crafted query to an authenticat...

6.1CVSS5.7AI score0.00106EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/10/23 12:0 a.m.1 views

PT-2024-16161 · Unknown · Localserver

Name of the Vulnerable Software and Affected Versions: LocalServer version 1.0.9 Description: A Cross-Site Scripting XSS issue allows a remote user to send a specially crafted query to an authenticated user, potentially stealing their session details. This is achieved through the...

6.1CVSS5.9AI score0.00106EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/10/23 12:0 a.m.1 views

LocalServer 跨站脚本漏洞

LocalServer is a web server software for Windows by murdas83 Individual Developer. A cross-site scripting vulnerability exists in LocalServer version 1.0.9, which stems from a cross-site scripting XSS vulnerability that could allow a remote user to send a specially crafted query to an authenticat...

6.1CVSS5.7AI score0.00106EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/10/23 12:0 a.m.1 views

LocalServer 跨站脚本漏洞

LocalServer is a web server software for Windows from the individual developer murdas83. A cross-site scripting vulnerability exists in LocalServer version 1.0.9, which can be exploited to obtain sensitive information from a user session via the ListName parameter on the /mlss/ForgotPassword page...

6.1CVSS5.9AI score0.00106EPSS
Exploits0References1
Rows per page
Query Builder