Lucene search
+L

8 matches found

OSV
OSV
•added 2024/01/29 8:15 p.m.•17 views

CVE-2024-24136

The 'Your Name' field in the Submit Score section of Sourcecodester Math Game with Leaderboard v1.0 is vulnerable to Cross-Site Scripting XSS attacks...

6.1CVSS5.7AI score0.00587EPSS
SaveExploits3References1
Positive Technologies
Positive Technologies
•added 2024/01/29 12:00 a.m.•15 views

PT-2024-20289 · Unknown · Sourcecodester Math Game With Leaderboard

Name of the Vulnerable Software and Affected Versions: Sourcecodester Math Game with Leaderboard version 1.0 Description: The issue concerns a Cross-Site Scripting XSS attack vulnerability. Specifically, the 'Your Name' field in the Submit Score section is affected. This type of attack occurs whe...

6.1CVSS5.6AI score0.00587EPSS
SaveExploits3References4
attackerkb
attackerkb
•added 2022/07/08 12:15 p.m.•11 views

CVE-2022-31290

A cross-site scripting XSS vulnerability in Known v1.2.2+2020061101 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Your Name text field...

5.4CVSS6.2AI score0.00859EPSS
SaveExploits1References5
OSV
OSV
•added 2022/07/08 12:15 p.m.•17 views

CVE-2022-31290

A cross-site scripting XSS vulnerability in Known v1.2.2+2020061101 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Your Name text field...

5.4CVSS5.9AI score0.00859EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2022/07/08 11:10 a.m.•66 views

CVE-2022-31290

A cross-site scripting XSS vulnerability in Known v1.2.2+2020061101 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Your Name text field...

5.3AI score0.00859EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/08 12:00 a.m.•4 views

CVE-2022-31290: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Known v1.2.2+2020061101 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Your Name text field...

5.4CVSS6.2AI score0.00859EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/07/08 12:00 a.m.•22 views

Known 跨站脚本漏洞

Known is an American Known open source social publishing platform. A security vulnerability exists in Known v1.3.1 and below, which stems from the presence of a cross-site scripting XSS vulnerability that allows an authenticated attacker to execute arbitrary web script or HTML via a crafted paylo...

5.4CVSS5.7AI score0.00859EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/05 12:00 a.m.•5 views

CVE-2006-6874: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in friend.php in eNdonesia 8.4 allow remote attackers to inject arbitrary web script or HTML via the 1 Message or 2 Your Name field. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

6.8CVSS5.9AI score0.01143EPSS
SaveExploits0References1
Rows per page
Query Builder