CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Rapid7 Vulnerability Database (full)•added 2014/11/05 12:00 a.m.•9 views

CVE-2014-8622: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter...

3.5CVSS5.9AI score0.01551EPSS

SaveExploits1References2

Positive Technologies•added 2014/11/05 12:00 a.m.•4 views

PT-2014-8651

Name of the Vulnerable Software and Affected Versions Compfight plugin version 1.4 for WordPress Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter in the compfight-search.php file. This could...

3.5CVSS0.01551EPSS

SaveExploits1References5

Positive Technologies•added 2014/08/12 12:00 a.m.•8 views

PT-2014-6341

Name of the Vulnerable Software and Affected Versions Compfight plugin version 1.4 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML. This is achieved via the search-value parameter in the compfight-search.php file...

3.5CVSS0.01542EPSS

SaveExploits1References5

Rapid7 Vulnerability Database (full)•added 2014/08/12 12:00 a.m.•6 views

CVE-2014-5202: Improper Neutralization of Input During Web Page Generation

3.5CVSS5.9AI score0.01542EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by