Lucene search
K

7 matches found

Vulnrichment
Vulnrichment
added 2026/01/30 4:16 p.m.3 views

CVE-2020-37003 Sellacious eCommerce 4.6 - Persistent Cross-Site Scripting

Sellacious eCommerce 4.6 contains a persistent cross-site scripting vulnerability in the Manage Your Addresses module that allows attackers to inject malicious scripts. Attackers can exploit multiple address input fields like full name, company, and address to execute persistent script code that...

6.4CVSS6AI score0.00059EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2008-6351

Malware in sbrugna...

4.6CVSS6.4AI score0.00259EPSS
Exploits1References6
Drupal
Drupal
added 2011/08/17 12:0 a.m.7 views

SA-CONTRIB-2011-036 - Addresses - Cross Site Scripting

This module enables you to link your users and contents to physical addresses. The module doesn't sufficiently filter output when displaying an address. This vulnerability is mitigated by the fact that the module doesn't use the single line display by default, an administrator has to enable that...

6.8AI score
Exploits0References8
NVD
NVD
added 2009/03/02 7:30 p.m.12 views

CVE-2008-6381

SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authenticated users with Addresses module permissions to execute arbitrary SQL commands via the cid parameter...

4.6CVSS8AI score0.00259EPSS
Exploits1References5
Prion
Prion
added 2009/03/02 7:30 p.m.14 views

Sql injection

SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authenticated users with Addresses module permissions to execute arbitrary SQL commands via the cid parameter...

4.6CVSS8.7AI score0.00259EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2009/03/02 7:0 p.m.34 views

CVE-2008-6381

The CVE-2008-6381 entry describes an SQL injection in bcoos 1.0.13 (and possibly earlier) affecting the module at modules/adresses/viewcat.php. The vulnerability can be triggered by the cid parameter by remote authenticated users who have Addresses module permissions, allowing arbitrary SQL comma...

4.6CVSS8.3AI score0.00259EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2009/03/02 7:0 p.m.12 views

CVE-2008-6381

SQL injection vulnerability in modules/adresses/viewcat.php in bcoos 1.0.13, and possibly earlier, allows remote authenticated users with Addresses module permissions to execute arbitrary SQL commands via the cid parameter...

8AI score0.00259EPSS
Exploits1References5
Rows per page
Query Builder