Lucene search
+L

7307 matches found

Cvelist
Cvelist
•added 2007/06/19 9:00 p.m.•41 views

CVE-2007-3269

Multiple cross-site scripting XSS vulnerabilities in Papoo Light 3.6 before 20070611 allow remote attackers to inject arbitrary web script or HTML via 1 the URI in a GET request or 2 the Title field of a visitor comment, and 3 allow remote authenticated users to inject arbitrary web script or HTM...

5.3AI score0.01812EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/06/19 12:00 a.m.•8 views

CVE-2007-3269: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Papoo Light 3.6 before 20070611 allow remote attackers to inject arbitrary web script or HTML via 1 the URI in a GET request or 2 the Title field of a visitor comment, and 3 allow remote authenticated users to inject arbitrary web script or HTM...

3.5CVSS5.9AI score0.01812EPSS
SaveExploits1References1
Prion
Prion
•added 2007/06/12 11:30 p.m.•19 views

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in ERFAN WIKI 1.00 allows remote attackers to inject arbitrary web script or HTML via the title parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS6AI score0.01033EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2007/06/12 11:30 p.m.•17 views

CVE-2007-3195

Cross-site scripting XSS vulnerability in index.php in ERFAN WIKI 1.00 allows remote attackers to inject arbitrary web script or HTML via the title parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS5.6AI score0.01033EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/06/12 12:00 a.m.•5 views

CVE-2007-3195: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in ERFAN WIKI 1.00 allows remote attackers to inject arbitrary web script or HTML via the title parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS6AI score0.01033EPSS
SaveExploits0References1
Prion
Prion
•added 2007/06/07 9:30 p.m.•17 views

Stack overflow

Multiple stack-based buffer overflows in stream/streamcddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long 1 album title or 2 category...

9.3CVSS7.8AI score0.05748EPSS
SaveExploits0References17Affected Software1
OSV
OSV
•added 2007/06/07 9:30 p.m.•8 views

DEBIAN-CVE-2007-2948

Multiple stack-based buffer overflows in stream/streamcddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long 1 album title or 2 category...

9.3CVSS7.8AI score0.05748EPSS
SaveExploits0References1
Prion
Prion
•added 2007/06/06 10:30 a.m.•23 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Aigaion before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter Authors and Publication titles to 1 authoractions.php or 2 publicationactions.php...

4.3CVSS6.1AI score0.01263EPSS
SaveExploits0References7Affected Software1
NVD
NVD
•added 2007/06/06 1:30 a.m.•20 views

CVE-2007-3049

Cross-site scripting XSS vulnerability in index.php in Buttercup web file manager BWFM May 2007 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

4.3CVSS5.7AI score0.01485EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2007/06/06 1:00 a.m.•32 views

CVE-2007-3049

Cross-site scripting XSS vulnerability in index.php in Buttercup web file manager BWFM May 2007 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

5.7AI score0.01485EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/06/06 12:00 a.m.•2 views

CVE-2007-3078: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Aigaion before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter Authors and Publication titles to 1 authoractions.php or 2 publicationactions.php...

4.3CVSS5.9AI score0.01263EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/06/06 12:00 a.m.•5 views

CVE-2007-3049: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Buttercup web file manager BWFM May 2007 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

4.3CVSS5.9AI score0.01485EPSS
SaveExploits2References1
NVD
NVD
•added 2007/05/30 10:30 a.m.•27 views

CVE-2007-2908

Cross-site scripting XSS vulnerability in calendar.php in Jelsoft vBulletin before 3.6.6 allows remote attackers to inject arbitrary web script or HTML via the title field in a single add action...

4.3CVSS5.7AI score0.01771EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2007/05/30 10:00 a.m.•27 views

CVE-2007-2915

Cross-site scripting XSS vulnerability in RM EasyMail Plus allows remote attackers to inject arbitrary web script or HTML via the title field in an email...

5.7AI score0.01028EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/05/30 12:00 a.m.•2 views

CVE-2007-2915: Undefined Security Weakness

Cross-site scripting XSS vulnerability in RM EasyMail Plus allows remote attackers to inject arbitrary web script or HTML via the title field in an email...

4.3CVSS6AI score0.01028EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/05/30 12:00 a.m.•3 views

CVE-2007-2908: Undefined Security Weakness

Cross-site scripting XSS vulnerability in calendar.php in Jelsoft vBulletin before 3.6.6 allows remote attackers to inject arbitrary web script or HTML via the title field in a single add action...

4.3CVSS6AI score0.01771EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2007/05/23 12:00 a.m.•37 views

rmeasymail-xss.txt

RM EasyMail Plus - Cross-Site Scripting Vulnerability 2 This cross-site scripting vulnerability can be exploited if a client views an email with a specially crafted title. Vulnerable E-Mail Title: alert1 Vulnerable: RM EasyMail Plus Google d0rk: intitle:"Powered by RM EasyMail Plus" John Martinel...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2007/05/23 12:00 a.m.•43 views

NavBoard 2.6.0 - Remote Code Execution

"; print ""; print ""; print "Main forum settings"; print ""; print "Board Title"; print ""; print ""; print ""; print "Admin email address blank will not display"; print ""; print "input type=text name="adminemail" value="$configarr...

7.5CVSS5.8AI score0.02312EPSS
SaveExploits2
Prion
Prion
•added 2007/05/16 10:30 p.m.•23 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Jetbox CMS allow remote attackers to inject arbitrary web script or HTML via the 1 path parameter to view/search/; or the 2 companyname, 3 country, 4 email, 5 firstname, 6 middlename, 7 required, 8 surname, or 9 title parameter to...

6.8CVSS6.1AI score0.04081EPSS
SaveExploits2References6Affected Software1
seebug.org
seebug.org
•added 2007/04/20 12:00 a.m.•32 views

CreaDirectory 1.2 (error.asp id) Remote SQL Injection Vulnerability

No description provided by source. Title : CreaDirectory v1.2 Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.creadirectory.com Script Page : http://www.creascripts.com/creadirectory.asp Vuln. Username :...

7.1AI score
SaveExploits0
Rows per page
Query Builder