Lucene search
+L

18 matches found

RedhatCVE
RedhatCVE
•added 2026/01/07 9:29 a.m.•18 views

CVE-2019-16890

Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments...

5.4CVSS5.7AI score0.00661EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2019-7389

Malware in sbrugna...

5.4CVSS5.6AI score0.00661EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2023/02/15 5:49 a.m.•7 views

SUSE CVE-2012-0220

Multiple cross-site scripting XSS vulnerabilities in the meta plugin Plugin/meta.pm in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the 1 author or 2 authorurl meta tags...

4.3CVSS8.1AI score0.02108EPSS
SaveExploits0References2
Veracode
Veracode
•added 2021/01/20 2:10 p.m.•25 views

Cross-Site Scripting (XSS)

mautic/core is vulnerable to stored cross-site scripting. An attacker is able to inject arbitrary Javascript on a user's browser via the authorUrl parameter...

6.1CVSS3.2AI score0.00905EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2019/09/25 9:15 p.m.•33 views

CVE-2019-16890

Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments...

5.4CVSS5.2AI score0.00661EPSS
SaveExploits1References1
OSV
OSV
•added 2019/09/25 9:15 p.m.•22 views

CVE-2019-16890

Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments...

5.4CVSS5.6AI score
SaveExploits0References1
Prion
Prion
•added 2019/09/25 9:15 p.m.•20 views

Hardcoded credentials

Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments...

3.5CVSS5.1AI score0.00661EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2019/09/25 8:17 p.m.•40 views

CVE-2019-16890

Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments...

5.2AI score0.00661EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/25 12:00 a.m.•2 views

CVE-2019-16890: Improper Neutralization of Input During Web Page Generation

Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments...

5.4CVSS5.9AI score0.00661EPSS
SaveExploits1References2
OSV
OSV
•added 2019/09/06 9:15 p.m.•19 views

CVE-2018-11198

An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json...

6.1CVSS5.5AI score
SaveExploits0References2
Prion
Prion
•added 2019/09/06 9:15 p.m.•22 views

Design/Logic Flaw

An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json...

4.3CVSS5.8AI score0.00905EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/06 12:00 a.m.•3 views

CVE-2018-11198: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json...

6.1CVSS6.3AI score0.00905EPSS
SaveExploits0References2
OSV
OSV
•added 2012/05/29 8:55 p.m.•14 views

CVE-2012-0220

Multiple cross-site scripting XSS vulnerabilities in the meta plugin Plugin/meta.pm in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the 1 author or 2 authorurl meta tags...

5.5AI score
SaveExploits0References8
OSV
OSV
•added 2012/05/29 8:55 p.m.•7 views

DEBIAN-CVE-2012-0220

Multiple cross-site scripting XSS vulnerabilities in the meta plugin Plugin/meta.pm in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the 1 author or 2 authorurl meta tags...

4.3CVSS8.2AI score0.02108EPSS
SaveExploits0References1
NVD
NVD
•added 2012/05/29 8:55 p.m.•16 views

CVE-2012-0220

Multiple cross-site scripting XSS vulnerabilities in the meta plugin Plugin/meta.pm in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the 1 author or 2 authorurl meta tags...

4.3CVSS5.6AI score0.02108EPSS
SaveExploits0References8
Prion
Prion
•added 2012/05/29 8:55 p.m.•15 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the meta plugin Plugin/meta.pm in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the 1 author or 2 authorurl meta tags...

4.3CVSS6AI score0.02108EPSS
SaveExploits0References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/05/29 12:00 a.m.•2 views

CVE-2012-0220: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the meta plugin Plugin/meta.pm in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the 1 author or 2 authorurl meta tags...

4.3CVSS8.2AI score0.02108EPSS
SaveExploits0References2
seebug.org
seebug.org
•added 2008/02/14 12:00 a.m.•58 views

Joomla Component xfaq 1.2 (aid) Remote SQL Injection Vulnerability

No description provided by source. joomla SQL Injectioncomxfaq AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MA陌L : [email protected] [email protected] DORK 1 : allinurl: aid "comxfaq" DORK 2 : allinurl: "comxfaq" EXPLOIT :...

7.1AI score
SaveExploits0
Rows per page
Query Builder