Lucene search
+L

8 matches found

NVD
NVD
•added 2008/03/20 10:44 a.m.•24 views

CVE-2008-1413

Cross-site scripting XSS vulnerability in search.php in SNewsCMS Rus 2.1 through 2.4 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

4.3CVSS5.7AI score0.01458EPSS
SaveExploits2References4
CVE
CVE
•added 2008/03/20 10:00 a.m.•51 views

CVE-2008-1413

The vulnerability CVE-2008-1413 affects SNewsCMS Rus versions 2.1 through 2.4, where the XSS flaw resides in the search.php parameter handling. The root cause is a cross-site scripting flaw that allows remote attackers to inject arbitrary web script or HTML via the query parameter, potentially en...

4.3CVSS5.7AI score0.01458EPSS
SaveExploits2References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/03/20 12:00 a.m.•7 views

CVE-2008-1413: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in SNewsCMS Rus 2.1 through 2.4 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

4.3CVSS5.9AI score0.01458EPSS
SaveExploits2References2
Packet Storm
Packet Storm
•added 2008/03/17 12:00 a.m.•23 views

snewscmsrus-xss.txt

New Advisory: Snewscms Rus v2 http://www.medprostuda.ru --------------------Summary---------------- Software: SnewsCMS Rus v. 2.3 Sowtware's Web Site: http://www.snewscms.net.ru Versions: 2.4 Critical Level: Moderate Type: XSS Class: Remote Status: Unpatched PoC/Exploit: Not Available Solution: N...

7.4AI score
SaveExploits0
securityvulns
securityvulns
•added 2008/03/17 12:00 a.m.•59 views

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Snewscms Rus 2.3: crossite scripting...

7.5CVSS1.6AI score0.01954EPSS
SaveExploits2References7Affected Software6
Prion
Prion
•added 2007/10/09 6:17 p.m.•28 views

Cross site scripting

Cross-site scripting XSS vulnerability in newspage.php in SnewsCMS Rus 2.1 allows remote attackers to inject arbitrary web script or HTML via the pageid parameter...

4.3CVSS6.1AI score0.01033EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2007/10/09 6:00 p.m.•60 views

CVE-2007-5303

CVE-2007-5303 is an XSS vulnerability affecting SnewsCMS Rus 2.1, specifically in news_page.php where the page_id parameter can be leveraged to inject arbitrary web scripts or HTML. The NVD entry documents a failed/open-based impact: confidentiality=NONE, integrity=PARTIAL, availability=NONE, wit...

4.3CVSS5.7AI score0.01033EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/10/09 12:00 a.m.•8 views

CVE-2007-5303: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in newspage.php in SnewsCMS Rus 2.1 allows remote attackers to inject arbitrary web script or HTML via the pageid parameter...

4.3CVSS6AI score0.01033EPSS
SaveExploits0References2
Rows per page
Query Builder