3 matches found
CVE-2009-1845
Cross-site scripting XSS vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1.7 allows remote attackers to inject arbitrary web script or HTML via the RequestName parameter...
5.7AI score0.01513EPSS
SaveExploits2References4
CVE-2009-1845: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1.7 allows remote attackers to inject arbitrary web script or HTML via the RequestName parameter...
4.3CVSS5.9AI score0.01513EPSS
SaveExploits2References2
CVE-2008-3759: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in ajax/UpdateCheck.php in Vanilla 1.1.4 and earlier has unknown impact and remote attack vectors...
7.5CVSS5.8AI score0.00631EPSS
SaveExploits1References2
20