Lucene search
+L

649 matches found

NVD
NVD
•added 2013/12/31 4:04 p.m.•24 views

CVE-2013-6459

Cross-site scripting XSS vulnerability in the willpaginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links...

4.3CVSS7.1AI score0.02209EPSS
SaveExploits1References4
OSV
OSV
•added 2013/12/31 4:04 p.m.•9 views

DEBIAN-CVE-2013-6459

Cross-site scripting XSS vulnerability in the willpaginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links...

4.3CVSS7.7AI score0.02209EPSS
SaveExploits1References1
Prion
Prion
•added 2013/12/31 4:04 p.m.•24 views

Cross site scripting

Cross-site scripting XSS vulnerability in the willpaginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links...

4.3CVSS6AI score0.02209EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
•added 2013/12/31 4:04 p.m.•33 views

CVE-2013-6459

Cross-site scripting XSS vulnerability in the willpaginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links...

4.3CVSS7.3AI score0.02209EPSS
SaveExploits1References3
OSV
OSV
•added 2013/12/31 4:04 p.m.•19 views

UBUNTU-CVE-2013-6459

Cross-site scripting XSS vulnerability in the willpaginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links...

4.3CVSS7.4AI score0.02209EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2013/12/31 3:00 p.m.•48 views

CVE-2013-6459

Cross-site scripting XSS vulnerability in the willpaginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links...

7.5AI score0.02209EPSS
SaveExploits1References4
CVE
CVE
•added 2013/12/31 3:00 p.m.•109 views

CVE-2013-6459

The CVE-2013-6459 entry concerns the will_paginate gem for Ruby, vulnerable before version 3.0.5 to Cross-site Scripting (XSS) via generated pagination links. Public references confirm the issue and link to the fixed release (3.0.5) from the gem’s release notes. In practice, an attacker could ind...

4.3CVSS5.5AI score0.02209EPSS
SaveExploits1References4Affected Software1
Mend
Mend
•added 2013/12/31 3:00 p.m.•2 views

CVE-2013-6459

Cross-site scripting XSS vulnerability in the willpaginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links...

6.3CVSS0.02209EPSS
SaveExploits1References7
Debian CVE
Debian CVE
•added 2013/12/31 3:00 p.m.•62 views

CVE-2013-6459

Cross-site scripting XSS vulnerability in the willpaginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links...

4.3CVSS4.4AI score0.02209EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2013/12/31 12:00 a.m.•2 views

PT-2013-6048

Name of the Vulnerable Software and Affected Versions will paginate gem versions prior to 3.0.5 Description The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML. This is achieved through vectors involving generated...

4.3CVSS0.02209EPSS
SaveExploits1References19
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/12/31 12:00 a.m.•3 views

CVE-2013-6459: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the willpaginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links...

4.3CVSS7.7AI score0.02209EPSS
SaveExploits1References2
RubySec
RubySec
•added 2013/09/19 12:00 a.m.•29 views

CVE-2013-6459 rubygem-will_paginate: XSS vulnerabilities

Cross-site scripting XSS vulnerability in the willpaginate gem before 3.0.5 for Ruby allows remote attackers to inject arbitrary web script or HTML via vectors involving generated pagination links. It was found that ruby willpaginate is vulnerable to a XSS via malformed input that cause paginatio...

4.3CVSS7.4AI score0.02209EPSS
SaveExploits1References1Affected Software1
exploitpack
exploitpack
•added 2013/03/25 12:00 a.m.•38 views

ClipShare 4.1.1 - gid Blind SQL Injection

ClipShare 4.1.1 - gid Blind SQL Injection Exploit Title: ClipShare 4.1.1 gmembers.php Blind SQL Injection Vulnerability Exploit Author: Esac Vulnerable Software: ClipShare - Video Sharing Community Script 4.1.4 Official site: http://www.clip-share.com Software License: Commercial. all versions ar...

0.1AI score
SaveExploits0
Atlassian
Atlassian
•added 2012/10/12 6:44 a.m.•33 views

XSS vulnerability in atlassian-bonfire-plugin pagination

There is an XSS vulnerability present in the pagination of Bonfire sessions. Steps to reproduce: 1. Create a user with username '" onmouseover="alert4321" blah="' without the single quotes 2. Create at least 21 test sessions owned by this user 3. Visit the user's profile page and click on the tes...

6.1AI score
SaveExploits0Affected Software1
NVD
NVD
•added 2012/08/26 6:55 p.m.•49 views

CVE-2010-5095

Cross-site scripting XSS vulnerability in SilverStripe 2.3.x before 2.3.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to DataObjectSet pagination...

4.3CVSS5.6AI score0.01647EPSS
SaveExploits0References10
Prion
Prion
•added 2012/08/26 6:55 p.m.•27 views

Cross site scripting

Cross-site scripting XSS vulnerability in SilverStripe 2.3.x before 2.3.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to DataObjectSet pagination...

4.3CVSS6.1AI score0.01647EPSS
SaveExploits0References10Affected Software1
Cvelist
Cvelist
•added 2012/08/26 6:00 p.m.•32 views

CVE-2010-5095

Cross-site scripting XSS vulnerability in SilverStripe 2.3.x before 2.3.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to DataObjectSet pagination...

5.6AI score0.01647EPSS
SaveExploits0References10
CVE
CVE
•added 2012/08/26 6:00 p.m.•56 views

CVE-2010-5095

CVE-2010-5095 is a cross-site scripting (XSS) vulnerability in SilverStripe 2.3.x prior to 2.3.6. The issue allows remote attackers to inject arbitrary web script or HTML via vectors related to DataObjectSet pagination. The vulnerability affects SilverStripe’s pagination handling and could lead t...

4.3CVSS5.8AI score0.01647EPSS
SaveExploits0References10Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/08/26 12:00 a.m.•5 views

CVE-2010-5095: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SilverStripe 2.3.x before 2.3.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to DataObjectSet pagination...

4.3CVSS6AI score0.01647EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2012/08/26 12:00 a.m.•3 views

PT-2012-1338

Name of the Vulnerable Software and Affected Versions SilverStripe versions 2.3.x through 2.3.5 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vectors related to DataObjectSet pagination. Recommendations For versions 2.3.x through...

4.3CVSS0.01647EPSS
SaveExploits0References12
Rows per page
Query Builder