Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:7 a.m.4 views

CVE-2020-7809

ALSong 3.46 and earlier version contain a Document Object Model DOM based cross-site scripting vulnerability caused by improper validation of user input. A remote attacker could exploit this vulnerability by tricking the victim to open ALSong Albumsab file...

6.1CVSS6.3AI score0.00264EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-28741

Malware in sbrugna...

6.1CVSS6.3AI score0.00264EPSS
Exploits0References3
CNVD
CNVD
added 2020/05/18 12:0 a.m.2 views

Estsoft ALSong Cross-Site Scripting Vulnerability

Eastsoft ALSong is a music player from the Korean company Eastsoft. A cross-site scripting vulnerability exists in Eastsoft ALSong 3.46 and earlier versions, which stems from a lack of proper validation of client-side data by the WEB application and can be exploited by an attacker to execute...

6.1CVSS6.3AI score0.00264EPSS
Exploits0References1
OSV
OSV
added 2020/05/15 3:15 p.m.1 views

CVE-2020-7809

ALSong 3.46 and earlier version contain a Document Object Model DOM based cross-site scripting vulnerability caused by improper validation of user input. A remote attacker could exploit this vulnerability by tricking the victim to open ALSong Albumsab file...

6.1CVSS6.3AI score
Exploits0References2
NVD
NVD
added 2020/05/15 3:15 p.m.7 views

CVE-2020-7809

ALSong 3.46 and earlier version contain a Document Object Model DOM based cross-site scripting vulnerability caused by improper validation of user input. A remote attacker could exploit this vulnerability by tricking the victim to open ALSong Albumsab file...

6.1CVSS4.9AI score0.00264EPSS
Exploits0References2
Prion
Prion
added 2020/05/15 3:15 p.m.8 views

Cross site scripting

ALSong 3.46 and earlier version contain a Document Object Model DOM based cross-site scripting vulnerability caused by improper validation of user input. A remote attacker could exploit this vulnerability by tricking the victim to open ALSong Albumsab file...

4.3CVSS5.9AI score0.00264EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2020/05/15 2:44 p.m.60 views

CVE-2020-7809

CVE-2020-7809 affects ALSong 3.46 and earlier. The vulnerability is a DOM-based cross-site scripting issue caused by improper validation of user input within ALSong, exploited when a victim is tricked into opening an ALSong Album(sab) file. The Red Hat and CNVD entries corroborate the same descri...

6.1CVSS5.2AI score0.00264EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/05/15 2:44 p.m.9 views

CVE-2020-7809 Estsoft ALSong DOM-Based XSS Vulnerability

ALSong 3.46 and earlier version contain a Document Object Model DOM based cross-site scripting vulnerability caused by improper validation of user input. A remote attacker could exploit this vulnerability by tricking the victim to open ALSong Albumsab file...

4.4CVSS6AI score0.00264EPSS
Exploits0References2
Rows per page
Query Builder