Lucene search
+L

58 matches found

OSV
OSV
added 2023/06/30 7:15 a.m.5 views

CVE-2023-3475

A vulnerability was found in SimplePHPscripts Event Script 2.1 and classified as problematic. Affected by this issue is some unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. I...

6.1CVSS3.8AI score0.00388EPSS
SaveExploits0References2
Prion
Prion
added 2023/06/30 7:15 a.m.18 views

Cross site scripting

A vulnerability was found in SimplePHPscripts Event Script 2.1 and classified as problematic. Affected by this issue is some unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. I...

4CVSS6AI score0.00388EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/06/30 7:0 a.m.38 views

CVE-2023-3476 SimplePHPscripts GuestBook Script URL Parameter preview.php cross site scripting

A vulnerability was found in SimplePHPscripts GuestBook Script 2.2. It has been classified as problematic. This affects an unknown part of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. I...

4CVSS6.2AI score0.00394EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/06/30 7:0 a.m.34 views

CVE-2023-3475 SimplePHPscripts Event Script URL Parameter preview.php cross site scripting

A vulnerability was found in SimplePHPscripts Event Script 2.1 and classified as problematic. Affected by this issue is some unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. I...

4CVSS6.2AI score0.00388EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/06/30 6:31 a.m.12 views

CVE-2023-3474 SimplePHPscripts Simple Blog URL Parameter preview.php cross site scripting

A vulnerability has been found in SimplePHPscripts Simple Blog 3.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched...

4CVSS6.3AI score0.00394EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/06/30 6:31 a.m.34 views

CVE-2023-3474 SimplePHPscripts Simple Blog URL Parameter preview.php cross site scripting

A vulnerability has been found in SimplePHPscripts Simple Blog 3.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched...

4CVSS6.2AI score0.00394EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/06/30 12:0 a.m.5 views

PT-2023-24993 · Unknown · Simplephpscripts Simple Blog

Name of the Vulnerable Software and Affected Versions: SimplePHPscripts Simple Blog version 3.2 Description: A vulnerability has been found in the file preview.php of the component URL Parameter Handler, which leads to cross site scripting. The attack can be launched remotely. Recommendations: Fo...

6.1CVSS6.6AI score0.00394EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/06/30 12:0 a.m.13 views

PT-2023-25004 · Unknown · Simplephpscripts Guestbook Script

Name of the Vulnerable Software and Affected Versions: SimplePHPscripts GuestBook Script version 2.2 Description: A vulnerability was found in the SimplePHPscripts GuestBook Script, affecting an unknown part of the file preview.php of the component URL Parameter Handler. The manipulation leads to...

6.1CVSS6.5AI score0.00394EPSS
SaveExploits0References5
NVD
NVD
added 2023/06/29 9:15 p.m.23 views

CVE-2023-3464

A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. It has been classified as problematic. Affected is an unknown function of the file /preview.php of the component URL Parameter Handler. The manipulation of the argument p leads to cross site scripting. It is possible to laun...

6.1CVSS4.5AI score0.00502EPSS
SaveExploits0References3
Prion
Prion
added 2023/06/29 9:15 p.m.20 views

Cross site scripting

A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. It has been classified as problematic. Affected is an unknown function of the file /preview.php of the component URL Parameter Handler. The manipulation of the argument p leads to cross site scripting. It is possible to laun...

4CVSS6.1AI score0.00502EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/06/29 8:31 p.m.29 views

CVE-2023-3464 SimplePHPscripts Classified Ads Script URL Parameter preview.php cross site scripting

A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. It has been classified as problematic. Affected is an unknown function of the file /preview.php of the component URL Parameter Handler. The manipulation of the argument p leads to cross site scripting. It is possible to laun...

4CVSS6.2AI score0.00502EPSS
SaveExploits0References3
NVD
NVD
added 2023/03/25 7:15 p.m.24 views

CVE-2023-1634

A vulnerability was found in OTCMS 6.72. It has been classified as critical. Affected is the function UseCurl of the file /admin/infodeal.php of the component URL Parameter Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit ha...

9.8CVSS7.2AI score0.00744EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/03/25 6:31 p.m.35 views

CVE-2023-1634 OTCMS URL Parameter info_deal.php UseCurl server-side request forgery

A vulnerability was found in OTCMS 6.72. It has been classified as critical. Affected is the function UseCurl of the file /admin/infodeal.php of the component URL Parameter Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit ha...

6.5CVSS9.8AI score0.00744EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2023/01/07 12:30 p.m.38 views

Inline SVG vulnerable to Cross-site Scripting

A vulnerability has been found in jamesmartin Inline SVG up to 1.7.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file lib/inlinesvg/actionview/helpers.rb of the component URL Parameter Handler. The manipulation of the argument filename leads to...

6.1CVSS6AI score0.00669EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2023/01/07 12:30 p.m.51 views

GHSA-P33Q-4H4M-J994 Inline SVG vulnerable to Cross-site Scripting

A vulnerability has been found in jamesmartin Inline SVG up to 1.7.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file lib/inlinesvg/actionview/helpers.rb of the component URL Parameter Handler. The manipulation of the argument filename leads to...

6.1CVSS6AI score0.00669EPSS
SaveExploits0References8
OSV
OSV
added 2023/01/07 10:15 a.m.24 views

CVE-2020-36644

A vulnerability has been found in jamesmartin Inline SVG up to 1.7.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file lib/inlinesvg/actionview/helpers.rb of the component URL Parameter Handler. The manipulation of the argument filename leads to...

6.1CVSS6.1AI score
SaveExploits0References5
CVE
CVE
added 2023/01/07 9:2 a.m.70 views

CVE-2020-36644

Inline SVG by jamesmartin is affected up to version 1.7.1. The vulnerability resides in the URL Parameter Handler, specifically lib/inline_svg/action_view/helpers.rb, where manipulating the filename argument can trigger cross-site scripting. It can be exploited remotely. Upgrading to version 1.7....

6.1CVSS4.8AI score0.00669EPSS
SaveExploits0References5Affected Software1
RubySec
RubySec
added 2023/01/07 12:0 a.m.23 views

Inline SVG vulnerable to Cross-site Scripting

A vulnerability has been found in jamesmartin Inline SVG up to 1.7.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file lib/inlinesvg/actionview/helpers.rb of the component URL Parameter Handler. The manipulation of the argument filename leads to...

6.1CVSS1.4AI score0.00669EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder