Lucene search
+L

67 matches found

CNNVD
CNNVD
•added 2022/03/31 12:00 a.m.•21 views

Pixelimity cross-site scripting vulnerability

Pixelimity is an open source PHP-based CMS Content Management System. A security vulnerability exists in Pixelimity 1.0 that originates from cross-site scripting via the site description field in pixelimity/admin/setting.php...

4.8CVSS4.8AI score0.00558EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/03/20 7:15 p.m.•11 views

CVE-2022-26246

TMS v2.28.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /TMS/admin/setting/mail/createorupdate...

6.1CVSS5.8AI score0.00621EPSS
SaveExploits1References2
Mend
Mend
•added 2022/03/20 6:34 p.m.•6 views

CVE-2022-26246

TMS v2.28.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /TMS/admin/setting/mail/createorupdate...

6.1CVSS0.00621EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/03/20 12:00 a.m.•9 views

PT-2022-17739

Name of the Vulnerable Software and Affected Versions TMS version 2.28.0 Description A cross-site scripting XSS issue was found in the /TMS/admin/setting/mail/createorupdate component. Recommendations For TMS version 2.28.0, update to a version that includes a fix for this issue, as no specific...

6.1CVSS0.00621EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/20 12:00 a.m.•10 views

CVE-2022-26246: Improper Neutralization of Input During Web Page Generation

TMS v2.28.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /TMS/admin/setting/mail/createorupdate...

6.1CVSS6.1AI score0.00621EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2021/10/04 9:15 p.m.•18 views

CVE-2020-21495

A cross-site scripting XSS vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitename parameter...

6.1CVSS6.5AI score0.00694EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2021/10/04 9:15 p.m.•19 views

CVE-2020-21496

A cross-site scripting XSS vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitebrief parameter...

6.1CVSS5.9AI score0.00694EPSS
SaveExploits1References2
Mend
Mend
•added 2021/10/04 9:00 p.m.•3 views

CVE-2020-21496

A cross-site scripting XSS vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitebrief parameter...

6.1CVSS0.00694EPSS
SaveExploits1References2
Mend
Mend
•added 2021/10/04 9:00 p.m.•3 views

CVE-2020-21495

A cross-site scripting XSS vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitename parameter...

6.1CVSS0.00694EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/10/04 12:00 a.m.•4 views

PT-2021-10632

Name of the Vulnerable Software and Affected Versions: Xiuno BBS version 4.0.4 Description: A cross-site scripting XSS issue exists in the /admin/?setting-base.htm component, allowing attackers to execute arbitrary web scripts or HTML via the sitename parameter. Recommendations: For Xiuno BBS...

6.1CVSS0.00694EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2021/10/04 12:00 a.m.•5 views

PT-2021-10633

Name of the Vulnerable Software and Affected Versions: Xiuno BBS version 4.0.4 Description: A cross-site scripting XSS issue exists in the /admin/?setting-base.htm component, allowing attackers to execute arbitrary web scripts or HTML via the sitebrief parameter. Recommendations: For Xiuno BBS...

6.1CVSS0.00694EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/04 12:00 a.m.•13 views

CVE-2020-21496: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitebrief parameter...

6.1CVSS6AI score0.00694EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/04 12:00 a.m.•6 views

CVE-2020-21495: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitename parameter...

6.1CVSS6AI score0.00694EPSS
SaveExploits1References2
NVD
NVD
•added 2021/08/17 6:15 p.m.•38 views

CVE-2021-29056

Cross Site Scripting XSS vulnerability exists in Pixelimity 1.0 via the HTTP POST parameter to admin/setting.php...

4.8CVSS0.0051EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/01/25 12:00 a.m.•15 views

Pixelimity Cross-Site Request Forgery Vulnerability

Pixelimity is a PHP-based open source CMS Content Management System. A cross-site request forgery vulnerability exists in Pixelimity version 1.0, which originates from the admin setting.php data Password parameter. No details of the vulnerability are available at this time...

6.8CVSS6.7AI score0.02033EPSS
SaveExploits3References1
Prion
Prion
•added 2021/01/19 1:15 p.m.•23 views

Cross site request forgery (csrf)

Pixelimity 1.0 has cross-site request forgery via the admin/setting.php data Password parameter...

6CVSS6.7AI score0.02033EPSS
SaveExploits3References2Affected Software1
NVD
NVD
•added 2020/02/19 3:15 p.m.•25 views

CVE-2012-1932

A cross-site scripting XSS vulnerability in Wolf CMS 0.75 and earlier allows remote attackers to inject arbitrary web script or HTML via the settingadminemail parameter to admin/setting...

4.8CVSS5AI score0.00703EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2020/02/19 2:27 p.m.•34 views

CVE-2012-1932

A cross-site scripting XSS vulnerability in Wolf CMS 0.75 and earlier allows remote attackers to inject arbitrary web script or HTML via the settingadminemail parameter to admin/setting...

4.9AI score0.00703EPSS
SaveExploits1References1
Mend
Mend
•added 2020/02/19 2:27 p.m.•6 views

CVE-2012-1932

A cross-site scripting XSS vulnerability in Wolf CMS 0.75 and earlier allows remote attackers to inject arbitrary web script or HTML via the settingadminemail parameter to admin/setting...

4.8CVSS0.00703EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2020/02/19 12:00 a.m.•4 views

PT-2020-7195

Name of the Vulnerable Software and Affected Versions Wolf CMS versions 0.75 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the settingadmin email parameter to the "admin/setting" endpoint. Recommendations For Wolf CMS...

4.8CVSS0.00703EPSS
SaveExploits1References3
Rows per page
Query Builder