Lucene search
+L

50 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2021-28489

Malicious code in bioql PyPI...

6.1CVSS6AI score0.00845EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/10/01 4:15 p.m.•9 views

CVE-2021-41462

Cross-site scripting XSS vulnerability in concrete/elements/collectionadd.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the ctID parameter...

6.1CVSS6.6AI score0.00845EPSS
SaveExploits1References3
Prion
Prion
•added 2021/10/01 4:15 p.m.•29 views

Cross site scripting

Cross-site scripting XSS vulnerability in concrete/elements/collectionadd.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the ctID parameter...

4.3CVSS6AI score0.00845EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2021/10/01 3:42 p.m.•4 views

CVE-2021-41462

Cross-site scripting XSS vulnerability in concrete/elements/collectionadd.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the ctID parameter...

6.1CVSS0.00845EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/10/01 3:42 p.m.•37 views

CVE-2021-41462

Cross-site scripting XSS vulnerability in concrete/elements/collectionadd.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the ctID parameter...

6.2AI score0.00845EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/10/01 12:00 a.m.•6 views

PT-2021-23305

Name of the Vulnerable Software and Affected Versions concrete5-legacy versions 5.6.4.0 and below Description The issue is a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the ctID parameter in the concrete/elements/collection add.ph...

6.1CVSS0.00845EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/01 12:00 a.m.•8 views

CVE-2021-41462: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in concrete/elements/collectionadd.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the ctID parameter...

6.1CVSS6AI score0.00845EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/10/01 12:00 a.m.•23 views

Portlandlabs Concrete5 跨站脚本漏洞

Portlandlabs Concrete5 is an open source content management system CMS from PortlandLabs, Inc. A cross-site scripting vulnerability exists in Portlandlabs Concrete5 crete5-legacy 5.6.4.0 and prior versions, which can be exploited by remote attackers to inject arbitrary Web script or HTML via the...

6.1CVSS5.5AI score0.00845EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2002/08/31 4:00 a.m.•42 views

CVE-2002-1007

Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via 1 the courseid parameter in a link to login.pl, 2 the CTID parameter in ProcessInfo.cgi, or 3 the Message parameter in index.cgi...

7AI score0.0279EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/08/31 12:00 a.m.•11 views

CVE-2002-1007: Undefined Security Weakness

Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via 1 the courseid parameter in a link to login.pl, 2 the CTID parameter in ProcessInfo.cgi, or 3 the Message parameter in index.cgi...

7.5CVSS6.3AI score0.0279EPSS
SaveExploits2References1
Rows per page
Query Builder