Lucene search
+L

7 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/17 12:00 a.m.•1 views

CVE-2023-53931: Improper Neutralization of Input During Web Page Generation

Revive Adserver 5.4.1 contains a cross-site scripting vulnerability in the banner advanced configuration page that allows attackers to inject malicious scripts. Attackers can craft a malicious link to the banner-advanced.php endpoint with XSS payloads in prepend and append parameters to execute...

6.1CVSS6.1AI score0.02747EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2024-51190

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00518EPSS
SaveExploits1References4
CNVD
CNVD
•added 2024/12/30 12:00 a.m.•25 views

Codezips Project Management System SQL Injection Vulnerability (CNVD-2025-00978)

Codezips Project Management System is a project management system that provides project management, task assignment and other features. A SQL injection vulnerability exists in the /pages/forms/advanced.php file in Codezips Project Management System version 1.0, which stems from insufficient...

8.8CVSS7.7AI score0.00518EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/25 12:00 a.m.•0 views

CVE-2024-12926: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Codezips Project Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/forms/advanced.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The...

8.8CVSS5.5AI score0.00518EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/03/28 12:00 a.m.•5 views

CVE-2016-9455: Cross-Site Request Forgery (CSRF)

Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery CSRF. A number of scripts in Revive Adserver's user interface are vulnerable to CSRF attacks: www/admin/banner-acl.php, www/admin/banner-activate.php, www/admin/banner-advanced.php, www/admin/banner-modify.php,...

8.8CVSS5.7AI score0.00801EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2012/10/29 12:00 a.m.•18 views

WANem index-advanced.php XSS

The remote host hosts a version of WANem that is affected by a cross-site scripting vulnerability. The index-advanced.php script does not properly sanitize user-supplied input. Other scripts on the server may be affected by cross-site scripting attacks as well. An attacker may be able to leverage...

5.5AI score
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2009/08/18 9:00 p.m.•43 views

CVE-2009-2853

Wordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to 1 admin-footer.php, 2 edit-category-form.php, 3 edit-form-advanced.php, 4 edit-form-comment.php, 5 edit-link-category-form.php, 6 edit-link-form.php, 7 edit-page-form.php, and 8 edit-tag-form.php in wp-admin...

10CVSS5.9AI score0.04711EPSS
SaveExploits3References1
Rows per page
Query Builder