Lucene search
+L

30 matches found

CNVD
CNVD
•added 2018/02/06 12:00 a.m.•19 views

Project-Pier ProjectPier-Core Cross-Site Scripting Vulnerability

Project-Pier ProjectPier-Core is a free open source project management system. Multiple cross-site scripting vulnerabilities exist in Project-Pier ProjectPier-Core. A remote attacker can inject arbitrary web script or HTML by sending the 'searchfor' parameter to the searchbytag.php file,...

6.1CVSS6.1AI score0.01063EPSS
SaveExploits1References1
Prion
Prion
•added 2018/02/02 9:29 p.m.•24 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Project-Pier ProjectPier-Core allow remote attackers to inject arbitrary web script or HTML via the searchfor parameter to 1 searchbytag.php, 2 searchcontacts.php, or 3 search.php...

4.3CVSS6.1AI score0.01063EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2018/02/02 9:29 p.m.•26 views

CVE-2015-2796

Multiple cross-site scripting XSS vulnerabilities in Project-Pier ProjectPier-Core allow remote attackers to inject arbitrary web script or HTML via the searchfor parameter to 1 searchbytag.php, 2 searchcontacts.php, or 3 search.php...

6.1CVSS6.1AI score0.01063EPSS
SaveExploits1References2
CVE
CVE
•added 2018/02/02 9:00 p.m.•66 views

CVE-2015-2796

Project-Pier ProjectPier-Core is affected by multiple XSS vulnerabilities in the search functionality. The issue arises from the search_for parameter being unsafely echoed by three pages: search_by_tag.php, search_contacts.php, and search.php, enabling remote attackers to inject arbitrary web scr...

6.1CVSS6AI score0.01063EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2018/02/02 9:00 p.m.•1 views

CVE-2015-2796

Multiple cross-site scripting XSS vulnerabilities in Project-Pier ProjectPier-Core allow remote attackers to inject arbitrary web script or HTML via the searchfor parameter to 1 searchbytag.php, 2 searchcontacts.php, or 3 search.php...

6.1CVSS0.01063EPSS
SaveExploits1References2
Packet Storm
Packet Storm
•added 2015/03/29 12:00 a.m.•29 views

ProjectPier 0.8.8 SP2 Cross Site Scripting

I was doing my RASP Runtime Application Self-Protection module testing on the latest version of Project Pier i.e. 0.8.8 SP2 yesterday and found an XSS vulnerability in search...

0.3AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•18 views

Project Pier Arbitrary File Upload Vulnerability

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2012/10/16 12:00 a.m.•29 views

Project Pier - Arbitrary File Upload (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Project Pier...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2012/10/12 12:00 a.m.•27 views

Project Pier Arbitrary File Upload

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Project Pier...

0.5AI score
SaveExploits0
zdt
zdt
•added 2012/10/11 12:00 a.m.•15 views

Project Pier Arbitrary File Upload

Exploit for multiple platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

7.1AI score
SaveExploits0
Rows per page
Query Builder