Lucene search
+L

11995 matches found

OSV
OSV
added 2024/08/12 1:38 p.m.11 views

CVE-2024-7660

A vulnerability has been found in SourceCodester File Manager App 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Add File Handler. The manipulation of the argument File Title/Uploaded By leads to cross site scripting. The attack can ...

6.1CVSS3.6AI score0.00517EPSS
SaveExploits1References4
OSV
OSV
added 2024/08/12 1:38 p.m.12 views

CVE-2024-7644

A vulnerability was found in SourceCodester Leads Manager Tool 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-leads.php of the component Add Leads Handler. The manipulation of the argument leadsname/phonenumber leads to cross site scripting. It ...

5.4CVSS3.7AI score0.0069EPSS
SaveExploits1References5
NVD
NVD
added 2024/08/12 1:38 p.m.29 views

CVE-2024-7644

A vulnerability was found in SourceCodester Leads Manager Tool 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-leads.php of the component Add Leads Handler. The manipulation of the argument leadsname/phonenumber leads to cross site scripting. It ...

5.4CVSS0.0069EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/08/12 12:00 a.m.19 views

PT-2024-30083 · Frog Cms · Frog Cms

Name of the Vulnerable Software and Affected Versions: FrogCMS version 0.9.5 Description: A Cross-Site Request Forgery CSRF issue was found in FrogCMS. The vulnerability can be exploited via the "/admin/?/page/add" API endpoint. Recommendations: For FrogCMS version 0.9.5, consider disabling acces...

8.8CVSS6.8AI score0.00329EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2024/08/12 12:00 a.m.39 views

CVE-2024-42632

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/page/add...

0.00329EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/08/12 12:00 a.m.15 views

CVE-2024-42626

FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/?/snippet/add...

8.9AI score0.00295EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/08/12 12:00 a.m.16 views

FrogCms 安全漏洞

FrogCms is an HTTP server by philippe personal developer. A security vulnerability exists in FrogCms version v0.9.5, which stems from a vulnerability discovered via /admin/? /layout/add was found to contain a cross-site request forgery vulnerability...

8.8CVSS6.8AI score0.00225EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/08/12 12:00 a.m.13 views

PT-2024-30075 · Frog Cms · Frog Cms

Name of the Vulnerable Software and Affected Versions: FrogCMS version 0.9.5 Description: A Cross-Site Request Forgery CSRF issue was found in FrogCMS. The vulnerability can be exploited via the "/admin/?/layout/add" API endpoint. Recommendations: For FrogCMS version 0.9.5, as a temporary...

8.8CVSS7AI score0.00225EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/08/12 12:00 a.m.15 views

FrogCms 安全漏洞

FrogCms is an HTTP server by philippe personal developer. A security vulnerability exists in FrogCms version v0.9.5, which stems from a vulnerability discovered via /admin/? /snippet/add was found to contain a cross-site request forgery vulnerability...

8.8CVSS6.8AI score0.00295EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/08/12 12:00 a.m.14 views

SourceCodester File Manager 安全漏洞

SourceCodester File Manager is a file manager. A security vulnerability exists in SourceCodester File Manager version 1.0, which stems from a cross-site scripting vulnerability in the File Title/Uploaded By parameter of the Add File Handler component...

6.1CVSS4.6AI score0.00517EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/08/12 12:00 a.m.11 views

SourceCodester Leads Manager Tool 跨站脚本漏洞

SourceCodester Leads Manager Tool is a leads management tool from SourceCodester, Inc. A cross-site scripting vulnerability exists in SourceCodester Leads Manager Tool version 1.0, which originates from a cross-site scripting vulnerability in the Add Leads Handler component on the...

5.4CVSS4.5AI score0.0069EPSS
SaveExploits1References5
CVE
CVE
added 2024/08/11 3:00 a.m.81 views

CVE-2024-7660

SourceCodester File Manager App 1.0 contains a cross‑site scripting vulnerability in the Add File Handler. Manipulating the File Title/Uploaded By parameter can trigger XSS, with remote exploitation and a publicly disclosed exploit. Connected advisories do not specify the exact XSS type (reflecte...

6.1CVSS3.8AI score0.00517EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2024/08/11 3:00 a.m.37 views

CVE-2024-7660 SourceCodester File Manager App Add File cross site scripting

A vulnerability has been found in SourceCodester File Manager App 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Add File Handler. The manipulation of the argument File Title/Uploaded By leads to cross site scripting. The attack can ...

5.3CVSS0.00517EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/08/11 3:00 a.m.20 views

CVE-2024-7660 SourceCodester File Manager App Add File cross site scripting

A vulnerability has been found in SourceCodester File Manager App 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Add File Handler. The manipulation of the argument File Title/Uploaded By leads to cross site scripting. The attack can ...

5.3CVSS6.2AI score0.00517EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/08/11 12:00 a.m.19 views

PT-2024-38488 · Unknown · Sourcecodester File Manager App

Name of the Vulnerable Software and Affected Versions: SourceCodester File Manager App version 1.0 Description: A vulnerability has been found in the SourceCodester File Manager App, affecting an unknown functionality of the component Add File Handler. The manipulation of the argument File...

6.1CVSS4.3AI score0.00517EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2024/08/09 3:31 p.m.16 views

CVE-2024-7644 SourceCodester Leads Manager Tool Add Leads add-leads.php cross site scripting

A vulnerability was found in SourceCodester Leads Manager Tool 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-leads.php of the component Add Leads Handler. The manipulation of the argument leadsname/phonenumber leads to cross site scripting. It ...

5.3CVSS6.2AI score0.0069EPSS
SaveExploits1References5
CVE
CVE
added 2024/08/09 3:31 p.m.55 views

CVE-2024-7644

SourceCodester Leads Manager Tool 1.0 is affected by a cross-site scripting vulnerability in the Add Leads Handler, specifically the /endpoint/add-leads.php endpoint. The issue arises from manipulating the leads_name and phone_number parameters, enabling remote XSS. The vulnerability is publicly ...

5.4CVSS3.7AI score0.0069EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2024/08/09 3:31 p.m.35 views

CVE-2024-7644 SourceCodester Leads Manager Tool Add Leads add-leads.php cross site scripting

A vulnerability was found in SourceCodester Leads Manager Tool 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-leads.php of the component Add Leads Handler. The manipulation of the argument leadsname/phonenumber leads to cross site scripting. It ...

5.3CVSS0.0069EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/08/09 12:00 a.m.16 views

PT-2024-29967 · Openhab · Cometvisu Add-On +1

Name of the Vulnerable Software and Affected Versions: openHAB CometVisu add-on versions prior to 4.2.1 Description: The issue affects several endpoints in the CometVisu add-on of openHAB that do not require authentication, allowing unauthenticated attackers to modify or steal sensitive data. Thi...

9.1CVSS6.8AI score0.00523EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/08/09 12:00 a.m.13 views

PT-2024-38476 · Sourcecodester · Sourcecodester Leads Manager Tool

Name of the Vulnerable Software and Affected Versions: SourceCodester Leads Manager Tool version 1.0 Description: A problematic issue has been found, affecting the /endpoint/add-leads.php file of the Add Leads Handler component. The manipulation of the leads name and phone number arguments leads ...

5.4CVSS4.2AI score0.0069EPSS
SaveExploits1References6
Rows per page
Query Builder