CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

osv_cve•added 2017/11/27 10:29 a.m.•19 views

CVE-2017-16956

b3log Symphony aka Sym 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title...

6.1CVSS5.8AI score0.00745EPSS

SaveExploits1References1

Prion•added 2017/11/27 10:29 a.m.•33 views

Cross site scripting

b3log Symphony aka Sym 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title...

4.3CVSS6AI score0.00745EPSS

SaveExploits1References1Affected Software1

Mend•added 2017/11/27 10:00 a.m.•9 views

CVE-2017-16956

b3log Symphony aka Sym 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title...

6.1CVSS0.00745EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2017/11/27 12:00 a.m.•11 views

CVE-2017-16956: Improper Neutralization of Input During Web Page Generation

b3log Symphony aka Sym 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title...

6.1CVSS6.3AI score0.00745EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by