Lucene search
+L

4057 matches found

exploitpack
exploitpack
added 2009/07/20 12:00 a.m.16 views

MyWeight 1.0 - user_addfood.php?date Cross-Site Scripting

MyWeight 1.0 - useraddfood.php?date Cross-Site Scripting source: https://www.securityfocus.com/bid/43488/info MyWeight is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary...

6.8AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/07/20 12:00 a.m.30 views

DragDropCart - '/assets/js/ddcart.php?sid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43478/info DragDropCart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

4.3CVSS5.8AI score0.0226EPSS
SaveExploits7
Exploit DB
Exploit DB
added 2009/07/20 12:00 a.m.23 views

DragDropCart - '/includes/ajax/getstate.php?prefix' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43478/info DragDropCart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

4.3CVSS5.8AI score0.0226EPSS
SaveExploits7
Exploit DB
Exploit DB
added 2009/07/20 12:00 a.m.30 views

GejoSoft Image Hosting Community - Cross-Site Scripting

source: https://www.securityfocus.com/bid/43486/info GejoSoft Image Hosting Community is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

4.3CVSS5.8AI score0.01544EPSS
SaveExploits2
Exploit DB
Exploit DB
added 2009/07/20 12:00 a.m.37 views

MyWeight 1.0 - 'user_forgot_pwd_form.php?info' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43488/info MyWeight is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in th...

4.3CVSS5.8AI score0.01768EPSS
SaveExploits4
NVD
NVD
added 2009/07/14 2:30 p.m.18 views

CVE-2008-6862

Absolute Content Rotator 6.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

7.5CVSS7.1AI score0.02511EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2009/07/14 2:00 p.m.27 views

CVE-2008-6862

Absolute Content Rotator 6.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...

7.1AI score0.02511EPSS
SaveExploits2References4
Exploit DB
Exploit DB
added 2009/07/09 12:00 a.m.27 views

JNM Guestbook 3.0 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43697/info JNM Guestbook is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...

4.3CVSS5.8AI score0.01656EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2009/07/09 12:00 a.m.22 views

Microsoft Internet Explorer XSS Vulnerability (Jul 2009)

Internet Explorer is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS4.7AI score0.14381EPSS
SaveExploits2References4
OpenVAS
OpenVAS
added 2009/07/08 12:00 a.m.43 views

phpDatingClub 'search.php' Cross-Site Scripting and SQL Injection Vulnerabilities

phpDatingClub is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the applicatio...

7.5CVSS0.01247EPSS
SaveExploits1References1
Exploit DB
Exploit DB
added 2009/07/08 12:00 a.m.27 views

Rapidsendit Clone Script - 'admin.php' Insecure Cookie Authentication Bypass

source: https://www.securityfocus.com/bid/43702/info Rapidsendit Clone Script is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. Attackers can exploit this vulnerability to gain administrative access t...

5.8AI score
SaveExploits0
exploitpack
exploitpack
added 2009/07/08 12:00 a.m.17 views

Rapidsendit Clone Script - admin.php Insecure Cookie Authentication Bypass

Rapidsendit Clone Script - admin.php Insecure Cookie Authentication Bypass source: https://www.securityfocus.com/bid/43702/info Rapidsendit Clone Script is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authenticatio...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/06/29 12:00 a.m.28 views

Miniweb 2.0 Site Builder Module - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/35871/info The Site Builder module for Miniweb is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of...

5.8AI score
SaveExploits0
exploitpack
exploitpack
added 2009/06/28 12:00 a.m.27 views

Matterdaddy Market 1.x - index.php Cross-Site Scripting

Matterdaddy Market 1.x - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/35856/info Matterdaddy Market is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scri...

SaveExploits0
exploitpack
exploitpack
added 2009/06/28 12:00 a.m.18 views

Google Chrome 2.0.172 - chrome:history URI Cross-Site Scripting

Google Chrome 2.0.172 - chrome:history URI Cross-Site Scripting source: https://www.securityfocus.com/bid/35841/info Google Chrome is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary...

SaveExploits0
Exploit DB
Exploit DB
added 2009/06/27 12:00 a.m.23 views

PG Roommate Finder Solution - 'quick_search.php?part' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35814/info PG Roommate Finder Solution is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user ...

4.3CVSS5.8AI score0.01788EPSS
SaveExploits3
Exploit DB
Exploit DB
added 2009/06/24 12:00 a.m.31 views

Pilot Group eTraining - 'lessons_login.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35834/info PG eTraining is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

4.3CVSS5.8AI score0.01502EPSS
SaveExploits4
exploitpack
exploitpack
added 2009/06/24 12:00 a.m.14 views

XZeroScripts XZero Community Classifieds 4.97.8 - Multiple Cross-Site Scripting Vulnerabilities

XZeroScripts XZero Community Classifieds 4.97.8 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/35809/info XZeroScripts XZero Community Classifieds is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize...

SaveExploits0
exploitpack
exploitpack
added 2009/06/24 12:00 a.m.13 views

Pilot Group eTraining - courses_login.php Cross-Site Scripting

Pilot Group eTraining - courseslogin.php Cross-Site Scripting source: https://www.securityfocus.com/bid/35834/info PG eTraining is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

6.8AI score
SaveExploits0
exploitpack
exploitpack
added 2009/06/24 12:00 a.m.11 views

PG Matchmaking - browse_ladies.php?show Cross-Site Scripting

PG Matchmaking - browseladies.php?show Cross-Site Scripting source: https://www.securityfocus.com/bid/35808/info PG Matchmaking is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

6.8AI score
SaveExploits0
Rows per page
Query Builder