22 matches found
CVE-2016-4016: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in SAP Manufacturing Integration and Intelligence aka MII, formerly xMII 15 allows remote attackers to inject arbitrary web script or HTML via the title parameter to webdynpro/resources/sap.com/xappsxmiiuiadminnavigation/NavigationApplication, aka SAP Securi...
6.1CVSS6.4AI score0.01452EPSS
SaveExploits2References2
CVE-2007-4522: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via one or more of the following vectors: the 1 id parameter to a pages/deletepage.php, b navigation/deletemenu.php, and c navigation/deleteitem.php ...
6CVSS6.4AI score0.0173EPSS
SaveExploits2References1
20