Lucene search
+L

1062 matches found

OSV
OSV
added 2021/03/10 3:15 p.m.8 views

CVE-2020-35752

Baby Care System 1.0 is affected by a cross-site scripting XSS vulnerability in the Edit Page tab through the Post title parameter...

5.4CVSS6AI score0.00892EPSS
SaveExploits1References3
Prion
Prion
added 2021/03/10 3:15 p.m.19 views

Cross site scripting

Baby Care System 1.0 is affected by a cross-site scripting XSS vulnerability in the Edit Page tab through the Post title parameter...

3.5CVSS5.3AI score0.00892EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2021/03/10 2:15 p.m.38 views

CVE-2020-35752

Baby Care System 1.0 is affected by a cross-site scripting XSS vulnerability in the Edit Page tab through the Post title parameter...

5.3AI score0.00892EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/03/10 12:00 a.m.13 views

Sourcecodester baby-care-system-phpmysqli-full-source-code 跨站脚本漏洞

Sourcecodester baby-care-system-phpmysqli-full-source-code is a Sourcecodester open source application. Used to manage infant health care. A cross-site scripting vulnerability exists in baby-care-system-phpmysqli-full-source-code 1.0, which is affected by a cross-site scripting XSS vulnerability ...

5.4CVSS5.4AI score0.00892EPSS
SaveExploits1References4
NVD
NVD
added 2021/01/26 6:15 p.m.20 views

CVE-2020-29241

Online News Portal using PHP/MySQLi 1.0 is affected by cross-site scripting XSS which allows remote attackers to inject an arbitrary web script or HTML via the "Title" parameter...

4.8CVSS5AI score0.00632EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/26 6:15 p.m.6 views

CVE-2020-29241

Online News Portal using PHP/MySQLi 1.0 is affected by cross-site scripting XSS which allows remote attackers to inject an arbitrary web script or HTML via the "Title" parameter...

4.8CVSS5.8AI score0.00632EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/01/26 12:00 a.m.12 views

Online News Portal Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability in Online News Portal allows remote attackers to inject arbitrary web script or HTML via the "Title" parameter...

4.8CVSS5.8AI score0.00632EPSS
SaveExploits0References2
CVE
CVE
added 2021/01/21 2:41 p.m.40 views

CVE-2020-29241

CVE-2020-29241 affects a PHP/MySQLi-based Online News Portal (version 1.0). The vulnerability is cross-site scripting (XSS) that allows a remote attacker to inject arbitrary web script or HTML through the Title parameter. The provided documents do not specify affected server versions beyond the 1...

4.8CVSS5AI score0.00632EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2021/01/11 3:15 a.m.23 views

CVE-2020-35727

Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the BrowseDirs.do file via the title parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

5.4CVSS5.4AI score0.01289EPSS
SaveExploits1References2
OSV
OSV
added 2021/01/11 3:15 a.m.9 views

CVE-2020-35721

Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the BrowseAssets.do file via the title parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

5.4CVSS6.2AI score0.01262EPSS
SaveExploits1References2
Prion
Prion
added 2021/01/11 3:15 a.m.17 views

Cross site scripting

Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the BrowseDirs.do file via the title parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

3.5CVSS5.3AI score0.01289EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/01/11 3:15 a.m.19 views

Cross site scripting

Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the BrowseAssets.do file via the title parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

3.5CVSS5.3AI score0.01262EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/01/11 2:56 a.m.29 views

CVE-2020-35721

Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the BrowseAssets.do file via the title parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

5.4AI score0.01262EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2021/01/11 12:00 a.m.8 views

PT-2021-11833 · Quest · Quest Policy Authority

Name of the Vulnerable Software and Affected Versions: Quest Policy Authority version 8.1.2.200 Description: The issue allows remote attackers to inject malicious code into the browser via a specially crafted link to the "BrowseAssets.do" file using the title parameter. This affects products that...

5.4CVSS7.3AI score0.01262EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2021/01/11 12:00 a.m.10 views

PT-2021-11839 · Quest · Quest Policy Authority

Name of the Vulnerable Software and Affected Versions: Quest Policy Authority version 8.1.2.200 Description: The issue allows remote attackers to inject malicious code into the browser via a specially crafted link to the "BrowseDirs.do" file using the title parameter. This affects products that a...

5.4CVSS7.2AI score0.01289EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2021/01/10 12:00 a.m.12 views

Quest Software Policy Authority For Unified Communications Cross-Site Scripting Vulnerability

Quest Software Policy Authority For Unified Communications is a software from Quest Software, Inc. that is used in enterprise environments to consolidate communication data between various media text and instant messaging, video conferencing, email and voicemail. A cross-site scripting...

5.4CVSS6AI score0.01262EPSS
SaveExploits1References3
NVD
NVD
added 2020/12/25 6:15 a.m.25 views

CVE-2020-35706

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen...

5.4CVSS5.2AI score0.00595EPSS
SaveExploits1References2
OSV
OSV
added 2020/12/25 6:15 a.m.16 views

CVE-2020-35704

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen...

5.4CVSS5.5AI score
SaveExploits0References2
Prion
Prion
added 2020/12/25 6:15 a.m.22 views

Cross site scripting

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen...

3.5CVSS5.1AI score0.00595EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2020/12/25 6:15 a.m.19 views

Cross site scripting

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen...

3.5CVSS5.1AI score0.00595EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder