Lucene search
K

8 matches found

Openbugbounty
Openbugbounty
added 2017/04/07 12:54 p.m.7 views

edlefarben.at XSS vulnerability

Vulnerable URL: https://www.edlefarben.at/calc.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check edlefarben.at SSL...

6.3AI score
Exploits0
Prion
Prion
added 2012/10/08 11:55 p.m.10 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in asaanCart 0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to calc.php, 2 chat.php, 3 register.php, or 4 index.php in libs/smartyajax/; or the 5 page parameter to libs/smartyajax/index.php...

4.3CVSS6AI score0.00642EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2012/10/08 11:55 p.m.7 views

CVE-2012-5330

Multiple cross-site scripting XSS vulnerabilities in asaanCart 0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to calc.php, 2 chat.php, 3 register.php, or 4 index.php in libs/smartyajax/; or the 5 page parameter to libs/smartyajax/index.php...

4.3CVSS5.8AI score0.00642EPSS
Exploits1References4
CVE
CVE
added 2012/10/08 11:0 p.m.44 views

CVE-2012-5330

As provided, CVE-2012-5330 is an XSS vulnerability in asaanCart 0.9 affecting multiple entry points: the PATH_INFO parameters to calc.php, chat.php, register.php, or index.php in libs/smarty_ajax/, and the page parameter to libs/smarty_ajax/index.php. The description does not specify affected ver...

4.3CVSS5.9AI score0.00642EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2012/10/08 11:0 p.m.10 views

CVE-2012-5330

Multiple cross-site scripting XSS vulnerabilities in asaanCart 0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to calc.php, 2 chat.php, 3 register.php, or 4 index.php in libs/smartyajax/; or the 5 page parameter to libs/smartyajax/index.php...

5.8AI score0.00642EPSS
Exploits1References4
NVD
NVD
added 2011/09/23 11:55 p.m.7 views

CVE-2011-3724

CubeCart 4.4.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/shipping/USPS/calc.php and certain other files...

5CVSS6.1AI score0.00283EPSS
Exploits1References3
Cvelist
Cvelist
added 2011/09/23 11:0 p.m.16 views

CVE-2011-3724

CubeCart 4.4.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/shipping/USPS/calc.php and certain other files...

6.1AI score0.00283EPSS
Exploits1References3
CVE
CVE
added 2011/09/23 11:0 p.m.37 views

CVE-2011-3724

CubeCart 4.4.3 is affected by CVE-2011-3724. A remote attacker can obtain sensitive information by directly requesting certain PHP files (e.g., modules/shipping/USPS/calc.php), causing an error message that reveals the installation path. This constitutes partial confidentiality impact. The affect...

5CVSS6.3AI score0.00283EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder