Lucene search
K

24 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2005-4430

Malware in sbrugna...

4.3CVSS6.4AI score0.03008EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2007-4606

Malware in sbrugna...

4.3CVSS6.4AI score0.00628EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2005-4429

Malware in sbrugna...

4.3CVSS6.4AI score0.00346EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 6:16 a.m.1 views

SUSE CVE-2005-4434

Cross-site scripting XSS vulnerability in AbleDesign ReSearch 2.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS5.9AI score0.00346EPSS
Exploits0References2
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.9 views

AbleDesign MyCalendar 2.20.3 Index.PHP Multiple Cross-Site Scripting Vulnerabilities

No description provided by source...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.10 views

AbleDesign D-Man 3.0 Title Parameter Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15993/info D-Man is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'title' parameter. An attacker may leverage this issue t...

7.1AI score
Exploits0
NVD
NVD
added 2007/08/31 1:17 a.m.7 views

CVE-2007-4624

Cross-site scripting XSS vulnerability in pframe.php in AbleDesign Dynamic Picture Frame 1.00 allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter. NOTE: some of these details are obtained from third party information...

4.3CVSS5.7AI score0.00628EPSS
Exploits0References7
Cvelist
Cvelist
added 2007/08/31 1:0 a.m.12 views

CVE-2007-4624

Cross-site scripting XSS vulnerability in pframe.php in AbleDesign Dynamic Picture Frame 1.00 allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter. NOTE: some of these details are obtained from third party information...

5.7AI score0.00628EPSS
Exploits0References7
CVE
CVE
added 2007/08/31 1:0 a.m.44 views

CVE-2007-4624

The CVE-2007-4624 entry describes a cross-site scripting (XSS) vulnerability in AbleDesign Dynamic Picture Frame 1.00, specifically in pframe.php where the img_url parameter can be exploited to inject arbitrary web script or HTML. The vulnerability stems from inadequate input validation of the im...

4.3CVSS5.7AI score0.00628EPSS
Exploits0References7Affected Software1
Prion
Prion
added 2007/02/21 11:28 p.m.9 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in AbleDesign MyCalendar allow remote attackers to inject arbitrary web script or HTML via 1 the go parameter, 2 the keyword parameter in the search menu go=search, or 3 the username or 4 the password in a go=Login action...

4.3CVSS6.2AI score0.1292EPSS
Exploits1References10
NVD
NVD
added 2007/02/21 11:28 p.m.9 views

CVE-2007-1050

Multiple cross-site scripting XSS vulnerabilities in index.php in AbleDesign MyCalendar allow remote attackers to inject arbitrary web script or HTML via 1 the go parameter, 2 the keyword parameter in the search menu go=search, or 3 the username or 4 the password in a go=Login action...

4.3CVSS5.9AI score0.1292EPSS
Exploits1References10
Cvelist
Cvelist
added 2007/02/21 11:0 p.m.18 views

CVE-2007-1050

Multiple cross-site scripting XSS vulnerabilities in index.php in AbleDesign MyCalendar allow remote attackers to inject arbitrary web script or HTML via 1 the go parameter, 2 the keyword parameter in the search menu go=search, or 3 the username or 4 the password in a go=Login action...

5.9AI score0.1292EPSS
Exploits1References10
CVE
CVE
added 2007/02/21 11:0 p.m.50 views

CVE-2007-1050

CVE-2007-1050 describes multiple cross-site scripting (XSS) vulnerabilities in index.php of AbleDesign MyCalendar. The issue allows remote attackers to inject arbitrary web script or HTML via the following input points: (1) the go parameter, (2) the keyword parameter in the search menu (go=search...

4.3CVSS5.9AI score0.1292EPSS
Exploits1References10Affected Software1
EUVD
EUVD
added 2007/02/21 11:0 p.m.1 views

EUVD-2007-1047

Multiple cross-site scripting XSS vulnerabilities in index.php in AbleDesign MyCalendar allow remote attackers to inject arbitrary web script or HTML via 1 the go parameter, 2 the keyword parameter in the search menu go=search, or 3 the username or 4 the password in a go=Login action...

4.3CVSS5.9AI score0.1292EPSS
Exploits1References10
Exploit DB
Exploit DB
added 2007/02/20 12:0 a.m.27 views

AbleDesign MyCalendar 2.20.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/22635/info MyCalendar is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

7.4AI score
Exploits0
NVD
NVD
added 2005/12/21 1:3 a.m.12 views

CVE-2005-4434

Cross-site scripting XSS vulnerability in AbleDesign ReSearch 2.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS5.5AI score0.00346EPSS
Exploits0References4
Cvelist
Cvelist
added 2005/12/21 1:0 a.m.12 views

CVE-2005-4434

Cross-site scripting XSS vulnerability in AbleDesign ReSearch 2.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

5.5AI score0.00346EPSS
Exploits0References4
CVE
CVE
added 2005/12/21 1:0 a.m.49 views

CVE-2005-4435

CVE-2005-4435 describes a cross-site scripting (XSS) vulnerability in the AbleDesign D-Man 3.x product, occurring in index.php via the title parameter. An attacker could inject arbitrary web script or HTML by supplying a crafted title value. The connected documents confirm the affected component ...

4.3CVSS5.8AI score0.03008EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2005/12/21 1:0 a.m.18 views

CVE-2005-4435

Cross-site scripting XSS vulnerability in index.php AbleDesign D-Man 3.x allows remote attackers to inject arbitrary web script or HTML via the title parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

5.6AI score0.03008EPSS
Exploits1References4
CVE
CVE
added 2005/12/21 1:0 a.m.50 views

CVE-2005-4434

CVE-2005-4434 affects AbleDesign ReSearch 2.x with a Cross-site scripting (XSS) vulnerability. The vectors are unknown, allowing remote injection of arbitrary script/HTML. Impact: partial integrity, no confidentiality or availability impact stated. The provided data does not specify exploitable c...

4.3CVSS5.8AI score0.00346EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder