CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

NVD•added 2020/11/19 9:15 p.m.•31 views

CVE-2020-28350

A Cross Site Scripting XSS vulnerability exists in OPAC in Sokrates SOWA SowaSQL through 5.6.1 via the sowacgi.php typ parameter...

6.1CVSS6AI score0.00668EPSS

SaveExploits2References1

CVE•added 2020/11/19 8:43 p.m.•50 views

CVE-2020-28350

The CVE-2020-28350 describes a Cross-Site Scripting (XSS) vulnerability in the OPAC component of Sokrates SOWA SowaSQL, triggered via the sowacgi.php typ parameter and affecting versions up to 5.6.1. The root cause is inadequate sanitization of HTML characters in the typ parameter, enabling injec...

6.1CVSS6AI score0.00668EPSS

SaveExploits2References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2020/11/19 12:00 a.m.•2 views

CVE-2020-28350: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting XSS vulnerability exists in OPAC in Sokrates SOWA SowaSQL through 5.6.1 via the sowacgi.php typ parameter...

6.1CVSS5.8AI score0.00668EPSS

SaveExploits2References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by