3 matches found
PT-2026-83985
TechStore 1.0 is vulnerable to Cross Site Scripting XSS. In contact display, the application echoes the id parameter verbatim into the rendered page, permitting execution of attacker-supplied JavaScript in users browser...
6AI score0.00217EPSS
SaveExploits0References2
CVE-2008-6746
Cross-site scripting XSS vulnerability in the contact display view in Turba Contact Manager H3 before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the contact name...
5.7AI score0.01067EPSS
SaveExploits0References5
CVE-2008-6746: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the contact display view in Turba Contact Manager H3 before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the contact name...
4.3CVSS6AI score0.01067EPSS
SaveExploits0References2
20