Lucene search
+L

7 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2020-18507

Malware in sbrugna...

5.4CVSS5.9AI score0.00507EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/05/22 3:23 p.m.•19 views

CVE-2020-25875

A stored cross site scripting XSS vulnerability in the 'Smileys' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payload entered into the 'Smiley Code' parameter...

5.4CVSS5.7AI score0.00507EPSS
SaveExploits1
CNVD
CNVD
•added 2021/07/13 12:00 a.m.•25 views

Codoforum cross-site scripting vulnerability (CNVD-2021-50176)

Codoforum is a set of PHP and MySQL based forum software. A cross-site scripting vulnerability exists in Codoforum version 5.0.2, which can be exploited by an attacker to execute arbitrary web script or HTML via a crafted payload with the "Smiley Code" parameter...

5.4CVSS6.3AI score0.00507EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2021/07/09 10:15 p.m.•20 views

CVE-2020-25875

A stored cross site scripting XSS vulnerability in the 'Smileys' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payload entered into the 'Smiley Code' parameter...

5.4CVSS5.6AI score0.00507EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/07/09 12:00 a.m.•6 views

PT-2021-11195

Name of the Vulnerable Software and Affected Versions: Codoforum version 5.0.2 Description: A stored cross site scripting XSS issue in the 'Smileys' feature allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Smiley Code parameter...

5.4CVSS0.00507EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2021/07/09 12:00 a.m.•16 views

Codoforum Cross-Site Scripting Vulnerability

Codoforum is a set of PHP and MySQL based forum software. A cross-site scripting vulnerability exists in Codoforum version 5.0.2, which can be exploited by an attacker to execute arbitrary web script or HTML via a crafted payload with the "Smiley Code" parameter...

5.4CVSS5.6AI score0.00507EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/09 12:00 a.m.•10 views

CVE-2020-25875: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in the 'Smileys' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payload entered into the 'Smiley Code' parameter...

5.4CVSS5.6AI score0.00507EPSS
SaveExploits1References2
Rows per page
Query Builder