Lucene search
+L

49 matches found

CVE
CVE
•added 2008/01/24 11:00 p.m.•72 views

CVE-2008-0444

CVE-2008-0444 affects Electronic Logbook (ELOG) versions before 2.7.0. The vulnerability is a Cross-site Scripting (XSS) issue that could allow remote attackers to inject arbitrary web script or HTML through the subtext parameter to unspecified components. The available connected sources confirm ...

4.3CVSS5.6AI score0.0125EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2008/01/24 11:00 p.m.•36 views

CVE-2008-0444

Cross-site scripting XSS vulnerability in Electronic Logbook ELOG before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via subtext parameter to unspecified components...

5.6AI score0.0125EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2008/01/24 11:00 p.m.•58 views

CVE-2008-0444

Removed by vendor...

4.3CVSS6.9AI score0.0125EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/01/24 12:00 a.m.•4 views

CVE-2008-0444: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Electronic Logbook ELOG before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via subtext parameter to unspecified components...

4.3CVSS5.9AI score0.0125EPSS
SaveExploits0References2
NVD
NVD
•added 2006/06/16 10:02 a.m.•15 views

CVE-2006-3046

Unspecified vulnerability in the admin login feature in Subtext 1.5, in a multiblog setup, allows remote administrators of one blog to login to another blog...

6.5CVSS6.6AI score0.01048EPSS
SaveExploits0References3
CVE
CVE
•added 2006/06/16 10:00 a.m.•53 views

CVE-2006-3046

This entry (CVE-2006-3046) describes an unspecified vulnerability in the Subtext 1.5 admin login feature in a multiblog setup, where remote administrators of one blog can log in to another blog. The available sources report only the vulnerability existence and affected component; no root-cause de...

6.5CVSS7AI score0.01048EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2006/06/16 10:00 a.m.•30 views

CVE-2006-3046

Unspecified vulnerability in the admin login feature in Subtext 1.5, in a multiblog setup, allows remote administrators of one blog to login to another blog...

6.6AI score0.01048EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/06/16 12:00 a.m.•5 views

CVE-2006-3046: Undefined Security Weakness

Unspecified vulnerability in the admin login feature in Subtext 1.5, in a multiblog setup, allows remote administrators of one blog to login to another blog...

6.5CVSS5.9AI score0.01048EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2006/06/13 12:00 a.m.•37 views

[SA20580] SubText MultiBlog Admin Logon Security Issue

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

0.7AI score
SaveExploits0
Rows per page
Query Builder