Lucene search
+L

1050 matches found

OSV
OSV
added 2020/01/23 9:15 p.m.16 views

CVE-2020-7936

An open redirect on the login form and possibly other places in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site...

6.1CVSS6.2AI score
SaveExploits0References4
NVD
NVD
added 2020/01/23 9:15 p.m.37 views

CVE-2020-7936

An open redirect on the login form and possibly other places in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site...

6.1CVSS6.2AI score0.0091EPSS
SaveExploits0References4
PyPA
PyPA
added 2020/01/23 9:15 p.m.46 views

PYSEC-2020-85

An open redirect on the login form and possibly other places in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site...

6.1CVSS6.9AI score0.0091EPSS
SaveExploits0References5Affected Software1
Prion
Prion
added 2020/01/23 9:15 p.m.17 views

Open redirect

An open redirect on the login form and possibly other places in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site...

5.8CVSS6.2AI score0.0091EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2020/01/23 9:15 p.m.36 views

PYSEC-2020-85

An open redirect on the login form and possibly other places in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site...

6.1CVSS3.2AI score0.0091EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2020/01/23 9:15 p.m.4 views

CVE-2020-7936

An open redirect on the login form and possibly other places in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site...

6.1CVSS6.3AI score0.0091EPSS
SaveExploits0References5
CVE
CVE
added 2020/01/23 8:39 p.m.89 views

CVE-2020-7936

CVE-2020-7936 describes an open redirect in Plone 4.0–5.2.1 on the login form (and possibly other entry points). The vulnerability allows an attacker to craft a link that, after following and possibly after login, redirects the user to the attacker's site. Affected software is Plone (4.0–5.2.1); ...

6.1CVSS6AI score0.0091EPSS
SaveExploits0References4Affected Software1
Openbugbounty
Openbugbounty
added 2019/12/26 9:54 a.m.8 views

nu.ac.bd Cross Site Scripting vulnerability OBB-1051697

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| nu.ac.bd ---|--- Open Bug Bounty...

6.3AI score
SaveExploits0
OSV
OSV
added 2019/11/12 10:58 p.m.43 views

GHSA-2P6P-V69P-9MM9 XSS in login form

In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form...

6.1CVSS6.3AI score0.02904EPSS
SaveExploits5References4
Github Security Blog
Github Security Blog
added 2019/11/12 10:58 p.m.42 views

XSS in login form

In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form...

6.1CVSS1.4AI score0.02904EPSS
SaveExploits5References5Affected Software1
NVD
NVD
added 2019/10/14 3:15 p.m.18 views

CVE-2019-16344

A cross-site scripting XSS vulnerability in the login form /ScadaBR/login.htm in ScadaBR 1.0CE allows a remote attacker to inject arbitrary web script or HTML via the username or password parameter...

6.1CVSS6AI score0.01036EPSS
SaveExploits1References1
OSV
OSV
added 2019/10/14 3:15 p.m.5 views

CVE-2019-16344

A cross-site scripting XSS vulnerability in the login form /ScadaBR/login.htm in ScadaBR 1.0CE allows a remote attacker to inject arbitrary web script or HTML via the username or password parameter...

6.1CVSS6.4AI score0.01036EPSS
SaveExploits1References1
Prion
Prion
added 2019/10/14 3:15 p.m.22 views

Cross site scripting

A cross-site scripting XSS vulnerability in the login form /ScadaBR/login.htm in ScadaBR 1.0CE allows a remote attacker to inject arbitrary web script or HTML via the username or password parameter...

4.3CVSS6AI score0.01036EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2019/10/14 2:05 p.m.74 views

CVE-2019-16344

CVE-2019-16344 affects ScadaBR 1.0CE, with an XSS vulnerability in the login form (/ScadaBR/login.htm) that allows an attacker to inject arbitrary script or HTML via the username or password parameter. The root cause is described as a lack of proper validation of client‑side data in the WEB appli...

6.1CVSS6AI score0.01036EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2019/10/14 12:00 a.m.6 views

Sensorweb ScadaBR Cross-Site Scripting Vulnerability (CNVD-2019-36859)

Sensorweb ScadaBR is a suite of open source software from Sensorweb for developing automated data acquisition and monitoring applications. A cross-site scripting vulnerability exists in the login form /ScadaBR/login.htm in Sensorweb ScadaBR version 1.0CE, which stems from a lack of proper...

6.1CVSS6.4AI score0.01036EPSS
SaveExploits1References1
NVD
NVD
added 2019/09/17 9:15 p.m.15 views

CVE-2019-16392

SPIP before 3.1.11 and 3.2 before 3.2.5 allows prive/formulaires/login.php XSS via error messages...

6.1CVSS6AI score0.0116EPSS
SaveExploits0References6
OSV
OSV
added 2019/09/17 9:15 p.m.2 views

DEBIAN-CVE-2019-16392

SPIP before 3.1.11 and 3.2 before 3.2.5 allows prive/formulaires/login.php XSS via error messages...

6.1CVSS6.8AI score0.0116EPSS
SaveExploits0References1
OSV
OSV
added 2019/09/17 9:15 p.m.6 views

UBUNTU-CVE-2019-16392

SPIP before 3.1.11 and 3.2 before 3.2.5 allows prive/formulaires/login.php XSS via error messages...

6.1CVSS6.9AI score0.0116EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2019/09/16 12:00 a.m.56 views

LimeSurvey < 3.17.14 Multiple Vulnerabilities

LimeSurvey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.5AI score0.04611EPSS
SaveExploits8References1
Prion
Prion
added 2019/09/09 9:15 p.m.17 views

Authentication flaw

Limesurvey before 3.17.14 allows remote attackers to bruteforce the login form and enumerate usernames when the LDAP authentication method is used...

5CVSS5.5AI score0.01697EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder