CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

osv-cve•added 2021/01/27 6:15 p.m.•26 views

CVE-2021-3318

attach/ajax.php in DzzOffice through 2.02.1 allows XSS via the editorid parameter...

6.1CVSS5.8AI score

SaveExploits0References2

attackerkb•added 2021/01/27 6:15 p.m.•15 views

CVE-2021-3318

attach/ajax.php in DzzOffice through 2.02.1 allows XSS via the editorid parameter...

6.1CVSS6.4AI score0.02848EPSS

SaveExploits4References3

Mend•added 2021/01/27 5:13 p.m.•5 views

CVE-2021-3318

attach/ajax.php in DzzOffice through 2.02.1 allows XSS via the editorid parameter...

6.1CVSS0.02848EPSS

SaveExploits4References2

Positive Technologies•added 2021/01/27 12:00 a.m.•6 views

PT-2021-20063

Name of the Vulnerable Software and Affected Versions DzzOffice versions 2.02.1 and earlier Description The issue allows for XSS via the editorid parameter in the "attach/ajax.php" endpoint. Recommendations For DzzOffice versions 2.02.1 and earlier, as a temporary workaround, consider restricting...

6.1CVSS5.6AI score0.02848EPSS

SaveExploits4References7

Rapid7 Vulnerability Database (full)•added 2021/01/27 12:00 a.m.•6 views

CVE-2021-3318: Improper Neutralization of Input During Web Page Generation

attach/ajax.php in DzzOffice through 2.02.1 allows XSS via the editorid parameter...

6.1CVSS5.8AI score0.02848EPSS

SaveExploits4References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by