Lucene search
K

18 matches found

Nuclei
Nuclei
added 8 hours ago41 views

Aryanic HighMail (High CMS) - Cross-Site Scripting

A cross-site scripting vulnerability in Aryanic HighMail High CMS versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm. id: CVE-2020-23517 info: name: Aryanic HighMail High CMS - Cross-Site Scripting author: geeknik severity: medium...

6.1CVSS6.3AI score0.13451EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2026/01/09 9:54 a.m.5 views

CVE-2020-23517

Cross Site Scripting XSS vulnerability in Aryanic HighMail High CMS versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm...

6.1CVSS6AI score0.13451EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-9704

Malware in sbrugna...

6.1CVSS6.3AI score0.00211EPSS
Exploits2References3
OSV
OSV
added 2021/03/26 3:16 a.m.0 views

CVE-2020-23517

Cross Site Scripting XSS vulnerability in Aryanic HighMail High CMS versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm...

6.1CVSS6.5AI score
Exploits0References1
NVD
NVD
added 2021/03/26 3:16 a.m.10 views

CVE-2020-23517

Cross Site Scripting XSS vulnerability in Aryanic HighMail High CMS versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm...

6.1CVSS0.13451EPSS
Exploits1References1
CVE
CVE
added 2021/03/26 1:8 a.m.99 views

CVE-2020-23517

Aryanic HighMail (High CMS) is affected by CVE-2020-23517, a cross-site scripting (XSS) vulnerability in versions 2020 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the 'user' parameter on the LoginForm. In published details, exploitation could enable a...

6.1CVSS6AI score0.13451EPSS
Exploits1References1Affected Software1
EUVD
EUVD
added 2021/03/26 1:8 a.m.3 views

EUVD-2020-16261

Cross Site Scripting XSS vulnerability in Aryanic HighMail High CMS versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm...

6.1CVSS6AI score0.13451EPSS
Exploits1References1
Cvelist
Cvelist
added 2021/03/26 1:8 a.m.14 views

CVE-2020-23517

Cross Site Scripting XSS vulnerability in Aryanic HighMail High CMS versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm...

6AI score0.13451EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/03/26 12:0 a.m.2 views

Aryanic HighMail 跨站脚本漏洞

Arianik Aryanic HighMail is an application from Arianik Iran. It is used to send and receive e-mail. A security vulnerability exists in Aryanic HighMail versions 2020, which allows remote attackers to inject arbitrary web script or HTML via the "user" to login to the inform...

6.1CVSS6.5AI score0.13451EPSS
Exploits1References2
CNVD
CNVD
added 2018/10/19 12:0 a.m.1 views

Aryanic HighPortal Cross-Site Scripting Vulnerability

Aryanic HighPortal is an enterprise portal system based on Java and ASP.NET. A cross-site scripting vulnerability exists in Aryanic HighPortal version 12.5. A remote attacker can exploit this vulnerability by adding tags to inject arbitrary web script or HTML...

6.1CVSS6AI score0.00211EPSS
Exploits2References1
OSV
OSV
added 2018/10/17 2:29 p.m.1 views

CVE-2018-17964

Aryanic HighPortal 12.5 has XSS via an Add Tags action...

6.1CVSS5.8AI score0.00211EPSS
Exploits2References1
NVD
NVD
added 2018/10/17 2:29 p.m.15 views

CVE-2018-17964

Aryanic HighPortal 12.5 has XSS via an Add Tags action...

6.1CVSS6.1AI score0.00211EPSS
Exploits2References1
Prion
Prion
added 2018/10/17 2:29 p.m.13 views

Deserialization of untrusted data

Aryanic HighPortal 12.5 has XSS via an Add Tags action...

4.3CVSS6AI score0.00211EPSS
Exploits2References1Affected Software1
CVE
CVE
added 2018/10/17 2:0 p.m.41 views

CVE-2018-17964

CVE-2018-17964 affects Aryanic HighPortal 12.5. The vulnerability is a Cross‑Site Scripting (XSS) flaw that can be triggered via the Add Tags action, enabling injection of arbitrary script/HTML. Public sources in CNVD/NVD describe HighPortal 12.5 as vulnerable to XSS, with the remote attacker abl...

6.1CVSS6AI score0.00211EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2018/10/17 2:0 p.m.13 views

CVE-2018-17964

Aryanic HighPortal 12.5 has XSS via an Add Tags action...

6.1AI score0.00211EPSS
Exploits2References1
Packet Storm
Packet Storm
added 2018/10/16 12:0 a.m.45 views

HighPortal 12.5 Cross Site Scripting

Vulnerable Product: HighPortal Affected version: 12.5 Vulnerability Type: XSS CVE: CVE-2018-17964 CWE: CWE-79 Credit: Ali Abdollahi Remote: Yes Description:XSS vulnerability on Aryanic HighPortal version 12.5 via an Add Tags action.Contact: https://twitter.com/aliabdollahi2 References: -...

0.2AI score0.00424EPSS
Exploits2
0day.today
0day.today
added 2018/10/16 12:0 a.m.40 views

HighPortal 12.5 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Vulnerable Product: HighPortal Affected version: 12.5 Vulnerability Type: XSS CVE: CVE-2018-17964 CWE: CWE-79 Credit: Ali Abdollahi Remote: Yes Description:XSS vulnerability on Aryanic HighPortal version 12.5 via an Add Tags action.Contact:...

0.3AI score0.00424EPSS
Exploits2
securityvulns
securityvulns
added 2009/03/12 12:0 a.m.165 views

Aryanic HighCMS and HighPortal multiple Vulnerabilities

================= IUT-CERT ================= Title: Aryanic HighPortal, HighCMS Multiple Vulnerabilities Vendor: www.aryanic.com Vulnerable Version: 10 and priors Type: Input.Validation.Vulnerability URI Injection, Frame Injection, XSS Fix: N/A ================== nsec.ir =================...

0.7AI score
Exploits0
Rows per page
Query Builder