Lucene search
+L

194 matches found

OSV
OSV
•added 2023/07/13 4:15 p.m.•21 views

CVE-2023-37743

A cross-site scripting XSS vulnerability in Teacher Subject Allocation System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search text box...

6.1CVSS5.9AI score0.00353EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/07/13 4:15 p.m.•14 views

CVE-2023-37743

A cross-site scripting XSS vulnerability in Teacher Subject Allocation System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search text box...

6.1CVSS6.5AI score0.00353EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/07/13 12:00 a.m.•16 views

PT-2023-26088 · Unknown · Teacher Subject Allocation System

Name of the Vulnerable Software and Affected Versions: Teacher Subject Allocation System version 1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search text box. Recommendations: For Teacher Subjec...

6.1CVSS6.1AI score0.00353EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/07/13 12:00 a.m.•35 views

CVE-2023-37743

A cross-site scripting XSS vulnerability in Teacher Subject Allocation System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search text box...

6AI score0.00353EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/07/10 6:15 p.m.•10 views

CVE-2023-36936

Cross-Site Scripting XSS vulnerability in PHPGurukul Online Security Guards Hiring System using PHP and MySQL 1.0 allows attackers to execute arbitrary code via a crafted payload to the search booking box...

6.1CVSS6.8AI score0.00605EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/07/10 12:00 a.m.•18 views

Online Security Guards Hiring System 跨站脚本漏洞

Online Security Guards Hiring System is an online security guard hiring system. A security vulnerability exists in Online Security Guards Hiring System version 1.0, which can be exploited to execute arbitrary code via a search booking box...

6.1CVSS6.8AI score0.00605EPSS
SaveExploits1References3
Microsoft KB
Microsoft KB
•added 2023/05/23 12:00 a.m.•21 views

May 23, 2023—KB5026436 (OS Build 22000.2003) Preview

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2023/05/23 12:00 a.m.•16 views

May 23, 2023—KB5026435 (OS Build 19045.3031) Preview

None None...

6.1AI score
SaveExploits0
Hacker One
Hacker One
•added 2022/04/11 9:58 a.m.•24 views

Automattic: XSS and HTML Injection on the pressable.com search box

Summary: Hi, I have found that search box on pressable.com is vulnerable for XSS attack and HTML Injection . Steps To Reproduce: 1. Visit https://pressable.com/knowledgebase/ 2. Put the payload on the search box. XSS Payload: " HTML Injection Payload: Visit Our New WebSite e x a m p l e . c o m...

0.2AI score
SaveExploits0
CNVD
CNVD
•added 2022/02/16 12:00 a.m.•69 views

Pybbs Cross-Site Scripting Vulnerability

Pybbs is a community forum for more practical Java development. A cross-site scripting vulnerability exists in Pybbs, which stems from the product's search box not effectively handling special characters in user input data. An attacker can exploit this vulnerability to execute client-side code...

6.1CVSS6AI score0.00621EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/02/14 9:15 p.m.•13 views

CVE-2022-23391

A cross-site scripting XSS vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box...

6.1CVSS6.5AI score0.00621EPSS
SaveExploits1References2
NVD
NVD
•added 2022/02/14 9:15 p.m.•29 views

CVE-2022-23391

A cross-site scripting XSS vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box...

6.1CVSS0.00621EPSS
SaveExploits1References1
Prion
Prion
•added 2022/02/14 9:15 p.m.•24 views

Cross site scripting

A cross-site scripting XSS vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box...

4.3CVSS5.9AI score0.00621EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/02/14 8:48 p.m.•45 views

CVE-2022-23391

A cross-site scripting XSS vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box...

6AI score0.00621EPSS
SaveExploits1References1
osv-cve
osv-cve
•added 2022/02/14 8:48 p.m.•28 views

CVE-2022-23391

A cross-site scripting XSS vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box...

5.7AI score
SaveExploits0References3
Mend
Mend
•added 2022/02/14 8:48 p.m.•4 views

CVE-2022-23391

A cross-site scripting XSS vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box...

6.1CVSS0.00621EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/02/14 12:00 a.m.•4 views

PT-2022-15972

Name of the Vulnerable Software and Affected Versions Pybbs version 6.0 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box. Recommendations For Pybbs version 6.0, consider restricting access to...

6.1CVSS0.00621EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/14 12:00 a.m.•8 views

CVE-2022-23391: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box...

6.1CVSS6.6AI score0.00621EPSS
SaveExploits1References2
Prion
Prion
•added 2021/09/01 10:15 p.m.•29 views

Cross site scripting

WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...

3.5CVSS5.2AI score0.00549EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2021/09/01 9:25 p.m.•38 views

CVE-2020-20345

WTCMS 1.0 contains a reflective cross-site scripting XSS vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box...

5.2AI score0.00549EPSS
SaveExploits1References2
Rows per page
Query Builder