Lucene search
+L

9 matches found

NVD
NVD
•added 2024/04/29 6:15 p.m.•24 views

CVE-2024-33338

Cross Site Scripting vulnerability in jizhicms v.2.5.4 allows a remote attacker to obtain sensitive information via a crafted article publication request...

7.3CVSS5.7AI score0.00971EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/04/29 12:00 a.m.•23 views

CVE-2024-33338

Cross Site Scripting vulnerability in jizhicms v.2.5.4 allows a remote attacker to obtain sensitive information via a crafted article publication request...

6AI score0.00971EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/04/29 12:00 a.m.•15 views

jizhicms 安全漏洞

Extreme Networks Technology JIZHICMS Extreme CMS is an open source content management system CMS from Extreme Networks Technology, China. A security vulnerability exists in jizhicms version v.2.5.4. A remote attacker could exploit the vulnerability to obtain sensitive information via a specially...

7.3CVSS6.4AI score0.00971EPSS
SaveExploits2References4
CVE
CVE
•added 2024/04/29 12:00 a.m.•72 views

CVE-2024-33338

A Cross-Site Scripting (XSS) vulnerability exists in jizhicms v.2.5.4 , an open-source content management system from Extreme Networks Technology. A remote attacker can exploit this flaw by sending a crafted article publication request to obtain sensitive information. At this time, there is no in...

7.3CVSS5.9AI score0.00971EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2020/03/27 12:00 a.m.•16 views

PT-2020-15048 · Otrs +2 · Otrs +3

Name of the Vulnerable Software and Affected Versions: OTRS Community Edition versions 6.0.26 and prior OTRS versions 7.0.15 and prior Description: The issue allows an attacker to craft an article with a link to the customer address book containing malicious JavaScript content. When an agent open...

9.8CVSS6.5AI score0.99215EPSS
SaveExploits19References148
OSV
OSV
•added 2017/06/24 5:29 p.m.•20 views

CVE-2017-9848

SQL injection vulnerability in CInfoService.asmx in WebServices in Easysite 7.0 could allow remote attackers to execute arbitrary SQL commands via an XML document containing a crafted ArticleIDs element within a GetArticleHitsArray element...

9.8CVSS6.1AI score0.01407EPSS
SaveExploits0References3
seebug.org
seebug.org
•added 2007/03/15 12:00 a.m.•39 views

NewsReactor 20070220 Article Grabbing Remote BoF Exploit (2)

No description provided by source. / NewsReactor 20070220 Article Grabbing Remote Buffer Overflow Exploit 2 &nb...

7.1AI score
SaveExploits0
zdt
zdt
•added 2007/03/12 12:00 a.m.•30 views

NewsReactor 20070220 Article Grabbing Remote BoF Exploit (2)

Exploit for unknown platform in category remote exploits ============================================================ NewsReactor 20070220 Article Grabbing Remote BoF Exploit 2 ============================================================ / NewsReactor 20070220 Article Grabbing Remote Buffer...

7.1AI score
SaveExploits0
Gentoo Linux
Gentoo Linux
•added 2006/11/24 12:00 a.m.•43 views

TIN: Multiple buffer overflows

Background TIN is a threaded NNTP and spool based UseNet newsreader for a variety of platforms. Description Urs Janssen and Aleksey Salow have reported multiple buffer overflows in TIN. Additionally, the OpenPKG project has reported an allocation off-by-one flaw which can lead to a buffer overflo...

7.5CVSS7.3AI score0.02881EPSS
SaveExploits0
Rows per page
Query Builder