Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
•added 2022/05/01 6:14 p.m.•26 views

HTML Purifier Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in smoketests/configForm.php in HTML Purifier before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "unescaped printr output."...

4.3CVSS6AI score0.01033EPSS
SaveExploits0References7Affected Software1
Prion
Prion
•added 2007/06/29 6:30 p.m.•26 views

Cross site scripting

Cross-site scripting XSS vulnerability in smoketests/configForm.php in HTML Purifier before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "unescaped printr output."...

4.3CVSS6.1AI score0.01033EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2007/06/29 6:00 p.m.•36 views

CVE-2007-3498

Cross-site scripting XSS vulnerability in smoketests/configForm.php in HTML Purifier before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "unescaped printr output."...

5.6AI score0.01033EPSS
SaveExploits0References4
CVE
CVE
•added 2007/06/29 6:00 p.m.•62 views

CVE-2007-3498

The CVE concerns HTML Purifier prior to 2.0.1, specifically a cross-site scripting (XSS) issue in smoketests/configForm.php. The root cause is an unescaped print_r output, enabling remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected software is the HTML Purif...

4.3CVSS5.7AI score0.01033EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/06/29 12:00 a.m.•9 views

CVE-2007-3498: Undefined Security Weakness

Cross-site scripting XSS vulnerability in smoketests/configForm.php in HTML Purifier before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "unescaped printr output."...

4.3CVSS6AI score0.01033EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/09/26 12:00 a.m.•9 views

CVE-2006-4986: Undefined Security Weakness

Grayscale BandSite CMS allows remote attackers to obtain sensitive information via a direct request for 1 certain files in the includes/content directory, 2 includes/showspreview.php, and 3 adminpanel/configform.php; and files in adminpanel/includes/ including 4 mailinglist/disphtmltbl.php, 5...

5CVSS5.8AI score0.01484EPSS
SaveExploits1References1
Rows per page
Query Builder