Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

59 matches found

OSV
OSV•added 2020/05/07 5:15 p.m.•8 views

CVE-2020-12679

A reflected cross-site scripting XSS vulnerability in the Mitel ShoreTel Conference Web Application 19.50.1000.0 before MiVoice Connect 18.7 SP2 allows remote attackers to inject arbitrary JavaScript and HTML via the PATHINFO to home.php...

6.1CVSS5.8AI score0.00773EPSS
SaveExploits0References1
Prion
Prion•added 2020/05/07 5:15 p.m.•23 views

Cross site scripting

A reflected cross-site scripting XSS vulnerability in the Mitel ShoreTel Conference Web Application 19.50.1000.0 before MiVoice Connect 18.7 SP2 allows remote attackers to inject arbitrary JavaScript and HTML via the PATHINFO to home.php...

4.3CVSS5.9AI score0.00773EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist•added 2020/05/07 4:36 p.m.•46 views

CVE-2020-12679

A reflected cross-site scripting XSS vulnerability in the Mitel ShoreTel Conference Web Application 19.50.1000.0 before MiVoice Connect 18.7 SP2 allows remote attackers to inject arbitrary JavaScript and HTML via the PATHINFO to home.php...

6AI score0.00773EPSS
SaveExploits0References1
CVE
CVE•added 2020/05/07 4:36 p.m.•54 views

CVE-2020-12679

CVE-2020-12679: A reflected XSS in Mitel ShoreTel Conference Web Application 19.50.1000.0 before MiVoice Connect 18.7 SP2 allows remote injection of JavaScript/HTML via PATH_INFO to home.php. Connected sources corroborate the same vulnerability across NVD/Red Hat/CNVD entries, with no public evid...

6.1CVSS5.9AI score0.00773EPSS
SaveExploits0References1Affected Software2
zdt
zdt•added 2019/04/09 12:00 a.m.•130 views

ShoreTel Connect ONSITE < 19.49.1500.0 - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Shoretel Connect Multiple Vulnerability Google Dork: inurl:/signin.php?ret= Author: Ramikan Vendor Homepage: https://www.shoretel.com/ Software Link: https://www.shoretel.com/resource-center/shoretel-connect-onsite-overview...

4.3CVSS0.05328EPSS
SaveExploits7
exploitpack
exploitpack•added 2019/04/08 12:00 a.m.•51 views

ShoreTel Connect ONSITE 19.49.1500.0 - Multiple Vulnerabilities

ShoreTel Connect ONSITE 19.49.1500.0 - Multiple Vulnerabilities Exploit Title: Shoretel Connect Multiple Vulnerability Google Dork: inurl:/signin.php?ret= Date: 14/06/2017 Author: Ramikan Vendor Homepage: https://www.shoretel.com/ Software Link:...

4.3CVSS0.3AI score0.05328EPSS
SaveExploits7
Exploit DB
Exploit DB•added 2019/04/08 12:00 a.m.•107 views

ShoreTel Connect ONSITE < 19.49.1500.0 - Multiple Vulnerabilities

Exploit Title: Shoretel Connect Multiple Vulnerability Google Dork: inurl:/signin.php?ret= Date: 14/06/2017 Author: Ramikan Vendor Homepage: https://www.shoretel.com/ Software Link: https://www.shoretel.com/resource-center/shoretel-connect-onsite-overview Version: Tested on 18.62.2000.0,...

6.1CVSS6.1AI score0.05328EPSS
SaveExploits7
Packet Storm
Packet Storm•added 2019/04/07 12:00 a.m.•44 views

ShoreTel Connect ONSITE Cross Site Scripting / Session Fixation

Exploit Title: Shoretel Connect Multiple Vulnerability Google Dork: inurl:/signin.php?ret= Date: 14/06/2017 Author: Ramikan Vendor Homepage: https://www.shoretel.com/ Software Link: https://www.shoretel.com/resource-center/shoretel-connect-onsite-overview Version: Tested on 18.62.2000.0,...

4.3CVSS6.2AI score0.05328EPSS
SaveExploits7
OSV
OSV•added 2019/03/06 4:29 p.m.•7 views

CVE-2019-9591

A reflected Cross-site scripting XSS vulnerability in ShoreTel Connect ONSITE before 19.49.1500.0 allows remote attackers to inject arbitrary web script or HTML via the brandUrl parameter...

6.1CVSS6.5AI score0.05328EPSS
SaveExploits5References3
Prion
Prion•added 2019/03/06 4:29 p.m.•24 views

Cross site scripting

A reflected Cross-site scripting XSS vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter...

4.3CVSS6AI score0.05304EPSS
SaveExploits5References3Affected Software1
NVD
NVD•added 2019/03/06 4:29 p.m.•28 views

CVE-2019-9593

A reflected Cross-site scripting XSS vulnerability in ShoreTel Connect ONSITE 18.82.2000.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

6.1CVSS6.1AI score0.0442EPSS
SaveExploits5References3
NVD
NVD•added 2019/03/06 4:29 p.m.•28 views

CVE-2019-9592

A reflected Cross-site scripting XSS vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter...

6.1CVSS6.1AI score0.05304EPSS
SaveExploits5References3
NVD
NVD•added 2019/03/06 4:29 p.m.•20 views

CVE-2019-9591

A reflected Cross-site scripting XSS vulnerability in ShoreTel Connect ONSITE before 19.49.1500.0 allows remote attackers to inject arbitrary web script or HTML via the brandUrl parameter...

6.1CVSS6.1AI score0.05328EPSS
SaveExploits5References3
Prion
Prion•added 2019/03/06 4:29 p.m.•19 views

Cross site scripting

A reflected Cross-site scripting XSS vulnerability in ShoreTel Connect ONSITE before 19.49.1500.0 allows remote attackers to inject arbitrary web script or HTML via the brandUrl parameter...

4.3CVSS6AI score0.05328EPSS
SaveExploits5References3Affected Software1
OSV
OSV•added 2019/03/06 4:29 p.m.•8 views

CVE-2019-9592

A reflected Cross-site scripting XSS vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter...

6.1CVSS6.5AI score0.05304EPSS
SaveExploits5References3
CVE
CVE•added 2019/03/06 4:00 p.m.•90 views

CVE-2019-9593

CVE-2019-9593 affects ShoreTel Connect ON SITE 18.82.2000.0. The vulnerability is a reflected XSS via the page parameter on a ShoreTel Connect ONSITE web page, enabling remote attackers to inject arbitrary script/HTML. The issue is documented across multiple sources (NVD and Mitel/OnSite disclosu...

6.1CVSS6AI score0.0442EPSS
SaveExploits5References3Affected Software1
CVE
CVE•added 2019/03/06 4:00 p.m.•103 views

CVE-2019-9591

ShoreTel Connect ONSITE prior to 19.49.1500.0 is affected by a reflected XSS via the brandUrl parameter. Impact is arbitrary script injection in the user’s browser. Root cause: unvalidated input reflected into the page. Affected component: signin.php (brandUrl parameter). Remediation: upgrade to ...

6.1CVSS6AI score0.05328EPSS
SaveExploits5References3Affected Software1
Cvelist
Cvelist•added 2019/03/06 4:00 p.m.•40 views

CVE-2019-9592

A reflected Cross-site scripting XSS vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter...

6AI score0.05304EPSS
SaveExploits5References3
Cvelist
Cvelist•added 2019/03/06 4:00 p.m.•40 views

CVE-2019-9593

A reflected Cross-site scripting XSS vulnerability in ShoreTel Connect ONSITE 18.82.2000.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

6AI score0.0442EPSS
SaveExploits5References3
Cvelist
Cvelist•added 2019/03/06 4:00 p.m.•34 views

CVE-2019-9591

A reflected Cross-site scripting XSS vulnerability in ShoreTel Connect ONSITE before 19.49.1500.0 allows remote attackers to inject arbitrary web script or HTML via the brandUrl parameter...

6AI score0.05328EPSS
SaveExploits5References3
Rows per page
Query Builder