6 matches found
CVE-2023-5296: Weak Password Recovery Mechanism for Forgotten Password
A vulnerability was found in Xinhu RockOA 1.1/2.3.2/15.X3amdi and classified as problematic. Affected by this issue is some unknown functionality of the file api.php?m=reimplat&a=index of the component Password Handler. The manipulation leads to weak password recovery. The attack may be launched...
7.5CVSS5.4AI score0.00513EPSS
SaveExploits1References2
CVE-2019-8363: Improper Neutralization of Input During Web Page Generation
Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=indexXSS value...
6.1CVSS5.8AI score0.00826EPSS
SaveExploits1References2
Cross site scripting
mao10cms 6 allows XSS via the m=bbs&a=index page...
4.3CVSS5.9AI score0.00705EPSS
SaveExploits0References2Affected Software1
CVE-2018-12695
mao10cms 6 allows XSS via the m=bbs&a=index page...
6AI score0.00705EPSS
SaveExploits0References2
20