Lucene search
+L

170 matches found

NVD
NVD
•added 2012/01/04 7:55 p.m.•24 views

CVE-2007-6751

Cross-site scripting XSS vulnerability in the MailForm plugin before 1.20 for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.8AI score0.01053EPSS
SaveExploits0References4
Prion
Prion
•added 2012/01/04 7:55 p.m.•20 views

Cross site scripting

Cross-site scripting XSS vulnerability in the MailForm plugin before 1.20 for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6.2AI score0.01053EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2012/01/04 7:00 p.m.•58 views

CVE-2007-6751

The CVE-2007-6751 entry describes a cross-site scripting (XSS) vulnerability in the MailForm plugin for Movable Type, affecting versions before 1.20. The vulnerability allows remote attackers to inject arbitrary script or HTML via unspecified vectors, resulting in arbitrary script execution in a ...

4.3CVSS5.9AI score0.01053EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2012/01/04 7:00 p.m.•32 views

CVE-2007-6751

Cross-site scripting XSS vulnerability in the MailForm plugin before 1.20 for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

5.8AI score0.01053EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/01/04 12:00 a.m.•2 views

CVE-2007-6751: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the MailForm plugin before 1.20 for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6AI score0.01053EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2011/12/26 5:49 a.m.•12 views

Movable Type Plugin MailForm vulnerable to cross-site scripting

Overview MailForm contains a cross-site scripting vulnerability. MailForm is a plugin for Movable Type. MailForm contains a cross-site scripting vulnerability. Daiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

4.3CVSS6.1AI score0.01053EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2011/12/26 12:00 a.m.•39 views

JVN#60887968: Movable Type Plugin MailForm vulnerable to cross-site scripting

MailForm is a plugin for Movable Type. MailForm contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the fixed version according to the information provided by the developer. Products Affected...

4.3CVSS5.9AI score0.01053EPSS
SaveExploits0
NVD
NVD
•added 2011/10/09 10:55 a.m.•23 views

CVE-2010-4939

PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter...

7.5CVSS7.5AI score0.02041EPSS
SaveExploits2References1
Prion
Prion
•added 2011/10/09 10:55 a.m.•14 views

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter...

7.5CVSS8AI score0.02041EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2011/10/09 10:00 a.m.•38 views

CVE-2010-4939

PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter...

7.5AI score0.02041EPSS
SaveExploits2References1
CVE
CVE
•added 2011/10/09 10:00 a.m.•59 views

CVE-2010-4939

CVE-2010-4939 is a PHP remote file inclusion vulnerability affecting MailForm 1.2 (index.php). The underlying issue is unsafe handling of the theme parameter, allowing an attacker to include a URL and execute arbitrary PHP code on the server. CVSS v2 base score is 7.5 (HIGH) with network access, ...

7.5CVSS7.8AI score0.02041EPSS
SaveExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/10/09 12:00 a.m.•3 views

CVE-2010-4939: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter...

7.5CVSS6.4AI score0.02041EPSS
SaveExploits2References2
Packet Storm
Packet Storm
•added 2010/08/17 12:00 a.m.•31 views

MailForm 1.2 Remote File Inclusion

Exploit Title: MailForm Remote File Include Date: 14-8-2010 Author: LoSt.HaCkEr / aDaMTRoJaN Software Link: http://scripts.bdr130.net/files/any/MailForm.zip Version: v 1.2 Tested on: Windows XP CVE : هكر المسيب Contact: LoSt.HaCkEratyahoodotcom /0r/ [email protected]...

7.4AI score
SaveExploits0
zdt
zdt
•added 2010/08/13 12:00 a.m.•28 views

MailForm 1.2 Remote File Include Vulnerability

Exploit for php platform in category web applications ============================================== MailForm 1.2 Remote File Include Vulnerability ============================================== Exploit Title: MailForm Remote File Include Date: 14-8-2010 Author: LoSt.HaCkEr / aDaMTRoJaN Software...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2010/08/13 12:00 a.m.•22 views

MailForm 1.2 - Remote File Inclusion

MailForm 1.2 - Remote File Inclusion Exploit Title: MailForm Remote File Include Date: 14-8-2010 Author: LoSt.HaCkEr / aDaMTRoJaN Software Link: http://scripts.bdr130.net/files/any/MailForm.zip Version: v 1.2 Tested on: Windows XP CVE : هكر المسيب Contact: LoSt.HaCkEratyahoodotcom /0r/ ...

7.5AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2010/08/13 12:00 a.m.•39 views

MailForm 1.2 - Remote File Inclusion

Exploit Title: MailForm Remote File Include Date: 14-8-2010 Author: LoSt.HaCkEr / aDaMTRoJaN Software Link: http://scripts.bdr130.net/files/any/MailForm.zip Version: v 1.2 Tested on: Windows XP CVE : هكر المسيب Contact: LoSt.HaCkEratyahoodotcom /0r/ [email protected]...

7.5CVSS5.2AI score0.02041EPSS
SaveExploits2
Prion
Prion
•added 2010/03/15 9:30 p.m.•17 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Mailform mailform extension before 0.9.24 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6.2AI score0.00855EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2010/03/15 9:30 p.m.•20 views

CVE-2009-4706

Cross-site scripting XSS vulnerability in the Mailform mailform extension before 0.9.24 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.7AI score0.00855EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2010/03/15 9:00 p.m.•31 views

CVE-2009-4706

Cross-site scripting XSS vulnerability in the Mailform mailform extension before 0.9.24 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

5.7AI score0.00855EPSS
SaveExploits0References1
CVE
CVE
•added 2010/03/15 9:00 p.m.•64 views

CVE-2009-4706

The CVE-2009-4706 issue is an XSS vulnerability in the TYPO3 Mailform extension prior to version 0.9.24. The affected component is Mailform (extension for TYPO3); the root cause is not specified in the provided documents beyond generic XSS in the extension. Impact per sources is remote arbitrary ...

4.3CVSS5.9AI score0.00855EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder