Lucene search
+L

38 matches found

OSV
OSV
added 2022/12/05 11:15 p.m.4 views

CVE-2022-45990

A cross-site scripting XSS vulnerability in the component /signupscript.php of Ecommerce-Website v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the eMail parameter...

6.1CVSS5.9AI score0.00463EPSS
Exploits1References1
OSV
OSV
added 2021/10/01 4:15 p.m.15 views

CVE-2021-40972

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the mail parameter...

6.1CVSS5.8AI score
Exploits0References2
UbuntuCve
UbuntuCve
added 2021/10/01 4:15 p.m.36 views

CVE-2021-40972

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the mail parameter...

6.1CVSS6.4AI score0.02214EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2021/10/01 4:15 p.m.6 views

CVE-2021-40972

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the mail parameter...

6.1CVSS6.6AI score0.02214EPSS
Exploits1References4
Prion
Prion
added 2021/10/01 4:15 p.m.16 views

Cross site scripting

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the mail parameter...

4.3CVSS6AI score0.02214EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/10/01 3:42 p.m.23 views

CVE-2021-40972

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the mail parameter...

6.2AI score0.02214EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2021/10/01 3:42 p.m.67 views

CVE-2021-40972

Removed by vendor...

6.1CVSS6.3AI score0.02214EPSS
Exploits1
CNVD
CNVD
added 2014/11/13 12:0 a.m.5 views

SQL Injection Vulnerability in Mail Parameters of Submission System of Nanjing Jenohan Software Technology Co.

A generic SQL injection vulnerability exists in the submission system of Nanjing Jenohan Software Technology Co. Ltd. that allows an attacker to access sensitive information in the database. A SQL injection vulnerability exists in the Mail parameter in the Submission System/liuyan.aspx of Jenohan...

7.7AI score
Exploits0References1
NVD
NVD
added 2010/10/27 7:0 p.m.20 views

CVE-2010-4097

Multiple cross-site scripting XSS vulnerabilities in index.php in Aardvark Topsites PHP 5.2.0 and 5.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 mail, 2 title, 3 u, and 4 url parameters. NOTE: the q parameter is already covered by CVE-2009-2302...

4.3CVSS5.7AI score0.01656EPSS
Exploits0References3
Prion
Prion
added 2010/10/27 7:0 p.m.19 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in Aardvark Topsites PHP 5.2.0 and 5.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 mail, 2 title, 3 u, and 4 url parameters. NOTE: the q parameter is already covered by CVE-2009-2302...

4.3CVSS6AI score0.01734EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2008/01/15 9:0 p.m.17 views

CVE-2008-0282

SQL injection vulnerability in welcome/inscription.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary SQL commands via the mail parameter...

7.5CVSS8.4AI score0.00973EPSS
Exploits1References4
Prion
Prion
added 2008/01/15 9:0 p.m.12 views

Sql injection

SQL injection vulnerability in welcome/inscription.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary SQL commands via the mail parameter...

7.5CVSS9.1AI score0.00973EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2008/01/15 8:0 p.m.36 views

CVE-2008-0282

The CVE-2008-0282 issue affects DomPHP 0.81 and earlier, where a SQL injection flaw in welcome/inscription.php via the mail parameter allows remote attackers to execute arbitrary SQL commands. The available documents do not specify a fixed version or patch; remediation details are not provided.

7.5CVSS8.4AI score0.00973EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2008/01/15 8:0 p.m.25 views

CVE-2008-0282

SQL injection vulnerability in welcome/inscription.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary SQL commands via the mail parameter...

8.4AI score0.00973EPSS
Exploits1References4
NVD
NVD
added 2006/07/06 8:5 p.m.12 views

CVE-2006-3386

index.php in Vincent Leclercq News 5.2 allows remote attackers to obtain sensitive information, such as the installation path, via a mail parameter with invalid values...

5CVSS6.4AI score0.01484EPSS
Exploits1References4
Cvelist
Cvelist
added 2006/07/06 8:0 p.m.23 views

CVE-2006-3386

index.php in Vincent Leclercq News 5.2 allows remote attackers to obtain sensitive information, such as the installation path, via a mail parameter with invalid values...

6.4AI score0.01484EPSS
Exploits1References4
NVD
NVD
added 2006/03/21 1:6 a.m.18 views

CVE-2006-1327

SQL injection vulnerability in reg.php in SoftBB 0.1 allows remote attackers to execute arbitrary SQL commands via the mail parameter...

7.5CVSS8.4AI score0.01482EPSS
Exploits1References6
Prion
Prion
added 2006/03/21 1:6 a.m.18 views

Sql injection

SQL injection vulnerability in reg.php in SoftBB 0.1 allows remote attackers to execute arbitrary SQL commands via the mail parameter...

7.5CVSS9AI score0.01482EPSS
Exploits1References6Affected Software1
Rows per page
Query Builder