Lucene search
+L

84 matches found

Prion
Prion
•added 2022/05/24 3:15 a.m.•25 views

Server side request forgery (ssrf)

mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery...

5CVSS7.6AI score0.00924EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/05/24 2:17 a.m.•32 views

CVE-2022-29309

mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery...

7.8AI score0.00924EPSS
SaveExploits1References1
Mend
Mend
•added 2022/05/24 2:17 a.m.•7 views

CVE-2022-29309

mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery...

8.7CVSS0.00924EPSS
SaveExploits1References1
CVE
CVE
•added 2022/05/24 2:17 a.m.•107 views

CVE-2022-29309

CVE-2022-29309 affects mysiteforme v2.2.1 and is a Server-Side Request Forgery (SSRF). Evidence from PT-2022-19532 indicates the issue is related to SSRF in version 2.2.1 and currently there is no available fix/version documented. Other sources (CNNVD) describe the vulnerability as enabling spoof...

7.5CVSS7.5AI score0.00924EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/24 12:00 a.m.•9 views

CVE-2022-29309: Server-Side Request Forgery (SSRF)

mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery...

7.5CVSS7.3AI score0.00924EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/05/24 12:00 a.m.•22 views

Mysiteforme 代码问题漏洞

Mysiteforme is a privilege management system. A security vulnerability exists in Mysiteforme version v2.2.1, which can be exploited by an attacker to spoof requests to the server side...

7.5CVSS7.4AI score0.00924EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/05/24 12:00 a.m.•19 views

PT-2022-19532 · Unknown · Mysiteforme

Name of the Vulnerable Software and Affected Versions: mysiteforme version 2.2.1 Description: The issue is related to a Server-Side Request Forgery. Recommendations: For mysiteforme version 2.2.1, at the moment, there is no information about a newer version that contains a fix for this issue...

7.5CVSS6.9AI score0.00924EPSS
SaveExploits1References5
CNVD
CNVD
•added 2022/01/23 12:00 a.m.•50 views

mysiteforme cross-site scripting vulnerability

Mysiteforme is a permission management system. mysiteforme suffers from a cross-site scripting vulnerability that stems from the lack of user-supplied data and output data validation filtering in the blog tagging function of the backend blog management. An attacker could exploit the vulnerability...

5.4CVSS3AI score0.00441EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/01/23 12:00 a.m.•44 views

mysiteforme Cross-Site Request Forgery Vulnerability

Mysiteforme is a permission management system. A cross-site request forgery vulnerability exists in mysiteforme, which stems from a lack of validation for cross-site request forgery in the backend blog administration. An attacker could use a forged malicious request to trick a victim into clickin...

6.5CVSS6.4AI score0.00416EPSS
SaveExploits1References1
NVD
NVD
•added 2022/01/20 12:15 a.m.•29 views

CVE-2021-46026

mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting XSS via the add blog tag function in the blog tag in the background blog management...

5.4CVSS0.00441EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/01/20 12:15 a.m.•14 views

CVE-2021-46026

mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting XSS via the add blog tag function in the blog tag in the background blog management...

5.4CVSS5.9AI score0.00441EPSS
SaveExploits1References2
NVD
NVD
•added 2022/01/19 11:15 p.m.•29 views

CVE-2021-46027

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, a blog tag will be added...

6.5CVSS0.00416EPSS
SaveExploits1References1
Prion
Prion
•added 2022/01/19 11:15 p.m.•29 views

Cross site request forgery (csrf)

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, a blog tag will be added...

4.3CVSS6.5AI score0.00416EPSS
SaveExploits1References1
Mend
Mend
•added 2022/01/19 11:04 p.m.•6 views

CVE-2021-46026

mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting XSS via the add blog tag function in the blog tag in the background blog management...

5.4CVSS0.00441EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/01/19 11:04 p.m.•35 views

CVE-2021-46026

mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting XSS via the add blog tag function in the blog tag in the background blog management...

5.5AI score0.00441EPSS
SaveExploits1References1
Mend
Mend
•added 2022/01/19 11:01 p.m.•5 views

CVE-2021-46027

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, a blog tag will be added...

7.1CVSS0.00416EPSS
SaveExploits1References1
CVE
CVE
•added 2022/01/19 11:01 p.m.•71 views

CVE-2021-46027

CVE-2021-46027 concerns a CSRF vulnerability in the background blog management of mysiteforme . The description across sources states an attacker can craft a malicious link and, when a site administrator clicks it, a blog tag is added, indicating a cross-site request forgery in the backend admini...

6.5CVSS6.4AI score0.00416EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/01/19 11:01 p.m.•45 views

CVE-2021-46027

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, a blog tag will be added...

6.7AI score0.00416EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/01/19 12:00 a.m.•25 views

PT-2022-12511 · Unknown · Mysiteforme

Name of the Vulnerable Software and Affected Versions: mysiteforme affected versions not specified Description: The issue concerns a Cross Site Scripting XSS vulnerability via the add blog tag function in the background blog management. This allows for potential malicious script execution...

5.4CVSS6AI score0.00441EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/19 12:00 a.m.•6 views

CVE-2021-46027: Cross-Site Request Forgery (CSRF)

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, a blog tag will be added...

6.5CVSS5.8AI score0.00416EPSS
SaveExploits1References2
Rows per page
Query Builder