Lucene search
+L

28 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/03/22 12:00 a.m.•4 views

CVE-2013-2501: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Terillion Reviews plugin before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ProfileId field...

4.3CVSS6AI score0.05268EPSS
SaveExploits3References2
Patchstack
Patchstack
•added 2013/03/07 12:00 a.m.•39 views

WordPress Terillion Reviews Plugin <= 1.1 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the ProfileId field. Solution Update the plugin...

4.3CVSS2.9AI score0.05268EPSS
SaveExploits3References1Affected Software1
zdt
zdt
•added 2010/06/25 12:00 a.m.•26 views

2DayBiz Matrimonial Script SQL Injection & XSS Vulnerabilities

Exploit for php platform in category web applications ============================================================== 2DayBiz Matrimonial Script SQL Injection & XSS Vulnerabilities ==============================================================...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2010/06/25 12:00 a.m.•40 views

2DayBiz Matrimonial Script - SQL Injection / Cross-Site Scripting

$------------------------------------------------------------------------------------------------------------------- $ 2daybiz Matrimonial Script SQL Injection and Cross Site Scripting Vulnerabilities $ Author : Sangteamtham $ Home : Hcegroup.net $ Download :...

5.3AI score
SaveExploits0
NVD
NVD
•added 2006/03/07 12:02 a.m.•24 views

CVE-2006-1026

JFacets before 0.2 allows remote attackers to gain privileges as any account via a GET request with a modified account profileID...

7.5CVSS6.9AI score0.01549EPSS
SaveExploits0References5
Prion
Prion
•added 2006/03/07 12:02 a.m.•21 views

Design/Logic Flaw

JFacets before 0.2 allows remote attackers to gain privileges as any account via a GET request with a modified account profileID...

7.5CVSS7.5AI score0.01549EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/03/07 12:00 a.m.•4 views

CVE-2006-1026: Undefined Security Weakness

JFacets before 0.2 allows remote attackers to gain privileges as any account via a GET request with a modified account profileID...

7.5CVSS5.9AI score0.01549EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2006/03/07 12:00 a.m.•31 views

CVE-2006-1026

JFacets before 0.2 allows remote attackers to gain privileges as any account via a GET request with a modified account profileID...

6.9AI score0.01549EPSS
SaveExploits0References5
Rows per page
Query Builder