Lucene search
+L

178 matches found

RedhatCVE
RedhatCVE
•added 2025/02/05 4:04 a.m.•13 views

CVE-2024-54320

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in icdsoft ICDSoft Reseller Store icdsoft-reseller-store allows Reflected XSS.This issue affects ICDSoft Reseller Store: from n/a through = 2.4.5...

7.1CVSS7.2AI score0.00436EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/13 3:15 p.m.•20 views

CVE-2024-54320

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in icdsoft ICDSoft Reseller Store icdsoft-reseller-store allows Reflected XSS.This issue affects ICDSoft Reseller Store: from n/a through = 2.4.5...

7.1CVSS0.00436EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/13 2:25 p.m.•19 views

CVE-2024-54320 WordPress ICDSoft Reseller Store plugin<= 2.4.5 -Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in icdsoft ICDSoft Reseller Store icdsoft-reseller-store allows Reflected XSS.This issue affects ICDSoft Reseller Store: from n/a through = 2.4.5...

7.1CVSS8.6AI score0.00436EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/13 2:25 p.m.•26 views

CVE-2024-54320 WordPress ICDSoft Reseller Store plugin<= 2.4.5 -Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in icdsoft ICDSoft Reseller Store icdsoft-reseller-store allows Reflected XSS.This issue affects ICDSoft Reseller Store: from n/a through = 2.4.5...

7.1CVSS0.00436EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/13 2:25 p.m.•60 views

CVE-2024-54320

CVE-2024-54320: Reflected XSS in ICDSoft Reseller Store plugin for WordPress. Affected: ICDSoft Reseller Store

7.1CVSS7.2AI score0.00436EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/13 12:00 a.m.•9 views

PT-2024-36203 · Cdsoft · Icdsoft Reseller Store

Name of the Vulnerable Software and Affected Versions: ICDSoft Reseller Store versions through 2.4.5 Description: The issue affects ICDSoft Reseller Store, allowing Reflected XSS due to improper neutralization of input during web page generation. This is a type of Cross-site Scripting...

7.1CVSS5.9AI score0.00436EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•11 views

WordPress plugin ICDSoft Reseller Store 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.9AI score0.00436EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/12/11 8:36 p.m.•8 views

WordPress ICDSoft Reseller Store plugin<= 2.4.5 -Reflected Cross Site Scripting (XSS) vulnerability

WordPress ICDSoft Reseller Store plugin= 2.4.5 -Reflected Cross Site Scripting XSS vulnerability discovered by hunter85 Patchstack Alliance in WordPress Plugin ICDSoft Reseller Store versions = 2.4.5...

7.1CVSS6.1AI score0.00436EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2024/06/21 12:00 a.m.•14 views

PT-2024-5353 · Securepoint · Securepoint Utm

Name of the Vulnerable Software and Affected Versions: Securepoint UTM versions 11.5 through 12.6.4 Securepoint UTM Reseller Preview version 12.7.0 Description: The issue is related to the authentication system of Securepoint UTM, specifically with the handling of One-Time Password OTP keys. This...

10CVSS7.5AI score0.0091EPSS
SaveExploits0References10
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/05/30 5:03 p.m.•7 views

Malicious code in flexfone-reseller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 18122a6d33435c1fb53b974e49237f471236504fef75bb09e9f0fb41c399a463 The OpenSSF Package Analysis project identified 'flexfone-reseller' @ 100.0.5 npm as malicious. It is considered malicious because: - The packag...

6.9AI score
SaveExploits0
OSV
OSV
•added 2024/02/07 2:15 p.m.•15 views

CVE-2024-24130

Mail2World v12 Business Control Center was discovered to contain a reflected cross-site scripting XSS vulnerability via the Usr parameter at resellercenter/login.asp...

6.1CVSS5.7AI score0.0037EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/02/07 12:00 a.m.•17 views

PT-2024-20284

Name of the Vulnerable Software and Affected Versions Mail2World version 12 Description A reflected cross-site scripting XSS issue was discovered in the Mail2World v12 Business Control Center. The issue is related to the Usr parameter at the "resellercenter/login.asp" endpoint. This allows for...

6.1CVSS5.6AI score0.0037EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2024/02/07 12:00 a.m.•47 views

CVE-2024-24130

Mail2World v12 Business Control Center was discovered to contain a reflected cross-site scripting XSS vulnerability via the Usr parameter at resellercenter/login.asp...

6.2AI score0.0037EPSS
SaveExploits1References1
NVD
NVD
•added 2024/01/02 1:15 a.m.•19 views

CVE-2024-0186

A vulnerability classified as problematic has been found in HuiRan Host Reseller System up to 2.0.0. Affected is an unknown function of the file /user/index/findpass?do=4 of the component HTTP POST Request Handler. The manipulation leads to weak password recovery. It is possible to launch the...

8.1CVSS5.6AI score0.00606EPSS
SaveExploits0References3
OSV
OSV
•added 2024/01/02 1:15 a.m.•14 views

CVE-2024-0186

A vulnerability classified as problematic has been found in HuiRan Host Reseller System up to 2.0.0. Affected is an unknown function of the file /user/index/findpass?do=4 of the component HTTP POST Request Handler. The manipulation leads to weak password recovery. It is possible to launch the...

8.1CVSS4.7AI score0.00606EPSS
SaveExploits0References3
Prion
Prion
•added 2024/01/02 1:15 a.m.•25 views

Design/Logic Flaw

A vulnerability classified as problematic has been found in HuiRan Host Reseller System up to 2.0.0. Affected is an unknown function of the file /user/index/findpass?do=4 of the component HTTP POST Request Handler. The manipulation leads to weak password recovery. It is possible to launch the...

2.6CVSS7.3AI score0.00606EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2024/01/02 12:31 a.m.•74 views

CVE-2024-0186

Summary: CVE-2024-0186 affects HuiRan Host Reseller System up to 2.0.0. The vulnerability is in an unknown function of the HTTP POST Request Handler at /user/index/findpass?do=4, enabling weak password recovery. Exploitation is described as remote with high attack complexity and a public exploit ...

8.1CVSS8.2AI score0.00606EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/02 12:31 a.m.•14 views

CVE-2024-0186 HuiRan Host Reseller System HTTP POST Request password recovery

A vulnerability classified as problematic has been found in HuiRan Host Reseller System up to 2.0.0. Affected is an unknown function of the file /user/index/findpass?do=4 of the component HTTP POST Request Handler. The manipulation leads to weak password recovery. It is possible to launch the...

3.7CVSS8.3AI score0.00606EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/01/02 12:31 a.m.•30 views

CVE-2024-0186 HuiRan Host Reseller System HTTP POST Request password recovery

A vulnerability classified as problematic has been found in HuiRan Host Reseller System up to 2.0.0. Affected is an unknown function of the file /user/index/findpass?do=4 of the component HTTP POST Request Handler. The manipulation leads to weak password recovery. It is possible to launch the...

3.7CVSS8.5AI score0.00606EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/01/02 12:00 a.m.•12 views

HuiRan Host Reseller System Authorization Issues Vulnerability

HuiRan Host Reseller System is a host reseller system from HuiRan. An authorization issue vulnerability exists in HuiRan Host Reseller System version 2.0.0 and prior versions, which stems from the file /user/index/findpass?do=4 that can lead to weak password recovery...

8.1CVSS6.8AI score0.00606EPSS
SaveExploits0References4
Rows per page
Query Builder