Lucene search
K

10 matches found

NVD
NVD
added 2021/03/30 12:16 p.m.16 views

CVE-2021-28935

CMS Made Simple CMSMS 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin My Preferences Title field...

5.4CVSS0.0023EPSS
Exploits4References2
Prion
Prion
added 2021/03/30 12:16 p.m.13 views

Design/Logic Flaw

CMS Made Simple CMSMS 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin My Preferences Title field...

3.5CVSS5.1AI score0.0023EPSS
Exploits4References2Affected Software1
Cvelist
Cvelist
added 2021/03/30 12:0 p.m.13 views

CVE-2021-28935

CMS Made Simple CMSMS 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin My Preferences Title field...

5.4AI score0.0023EPSS
Exploits4References2
Prion
Prion
added 2019/11/22 7:15 p.m.13 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 unspecified parameters to apps/calendar/ajax/event/new.php or 2 url parameter to apps/bookmarks/ajax/addBookmark.php...

3.5CVSS6.1AI score0.00236EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2018/01/25 4:29 p.m.14 views

Code injection

CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...

3.5CVSS4.9AI score0.00388EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2018/01/25 4:29 p.m.7 views

CVE-2018-5963

CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...

4.8CVSS5AI score0.00388EPSS
Exploits1References3
Cvelist
Cvelist
added 2018/01/25 4:0 p.m.12 views

CVE-2018-5963

CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...

5AI score0.00388EPSS
Exploits1References3
CVE
CVE
added 2018/01/25 4:0 p.m.45 views

CVE-2018-5963

CMS Made Simple (CMSMS) 2.2.5 contains a cross-site scripting (XSS) vulnerability in admin/addbookmark.php exploitable via the title parameter. The issue, reported in multiple sources, is a client-side script injection risk in the CMSMS admin interface; no details on exploit vectors or specific p...

4.8CVSS4.9AI score0.00388EPSS
Exploits1References3Affected Software1
Prion
Prion
added 2014/03/14 4:55 p.m.13 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ownCloud 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via the 1 tag parameter to apps/bookmarks/ajax/addBookmark.php or 2 dir parameter to apps/files/ajax/newfile.php, which is passed to...

3.5CVSS5.6AI score0.00185EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2012/09/05 11:0 p.m.15 views

CVE-2012-4393

Multiple cross-site request forgery CSRF vulnerabilities in ownCloud before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users for requests that use 1 addBookmark.php, 2 delBookmark.php, or 3 editBookmark.php in bookmarks/ajax/; 4 calendar/delete.php, 5 calendar/edit.php...

7.1AI score0.00159EPSS
Exploits1References5
Rows per page
Query Builder