Lucene search
K

39 matches found

CNNVD
CNNVD
added 2026/05/14 12:0 a.m.7 views

Vvveb 跨站脚本漏洞

Vvveb is a powerful and easy-to-use CMS developed by Givan’s developers, used for building websites, blogs, or e-commerce stores. Versions of Vvveb prior to 1.0.8.3 had a cross-site scripting vulnerability. This vulnerability stemmed from the Signup::addUser controller in the customer registratio...

6.1CVSS5.8AI score0.00036EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/27 6:51 p.m.17 views

CVE-2020-36978 Froxlor Froxlor Server Management Panel 0.10.16 - Persistent Cross-Site Scripting

Froxlor Server Management Panel 0.10.16 contains a persistent cross-site scripting vulnerability in customer registration input fields. Attackers can inject malicious scripts through username, name, and firstname parameters to execute code when administrators view customer traffic modules...

6.4CVSS0.00019EPSS
Exploits0References7
CVE
CVE
added 2026/01/27 6:51 p.m.9 views

CVE-2020-36978

Froxlor Server Management Panel 0.10.16 is affected by a persistent Cross-Site Scripting (XSS) vulnerability in the customer registration input fields. An attacker can inject malicious scripts via the username, name, or firstname parameters, which are then executed in the administrator’s browser ...

6.4CVSS6AI score0.00019EPSS
Exploits0References7
ATTACKERKB
ATTACKERKB
added 2026/01/27 6:51 p.m.2 views

CVE-2020-36978

Froxlor Server Management Panel 0.10.16 contains a persistent cross-site scripting vulnerability in customer registration input fields. Attackers can inject malicious scripts through username, name, and firstname parameters to execute code when administrators view customer traffic modules...

6.4CVSS6AI score0.00019EPSS
Exploits0References7Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 9:54 a.m.6 views

CVE-2020-23984

Online Hotel Booking System Pro PHP Version 1.3 has Persistent Cross-site Scripting in Customer registration-form all-tags...

5.4CVSS6.7AI score0.00181EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-16720

Malware in sbrugna...

5.4CVSS5.6AI score0.00181EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-1999-1162

Malware in sbrugna...

7.2CVSS6.4AI score0.0005EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2002-0548

Malware in sbrugna...

7.5CVSS6.4AI score0.07134EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-3507

Malicious code in bioql PyPI...

5.3CVSS5.5AI score0.001EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-39176

Malicious code in bioql PyPI...

5.3CVSS6.6AI score0.00406EPSS
Exploits0References2
NVD
NVD
added 2024/08/13 4:15 a.m.20 views

CVE-2024-41733

In SAP Commerce, valid user accounts can be identified during the customer registration and login processes. This allows a potential attacker to learn if a given e-mail is used for an account, but does not grant access to any customer data beyond this knowledge. The attacker must already know the...

5.3CVSS0.00406EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/08/13 3:52 a.m.19 views

CVE-2024-41733 Information Disclosure Vulnerability in SAP Commerce

In SAP Commerce, valid user accounts can be identified during the customer registration and login processes. This allows a potential attacker to learn if a given e-mail is used for an account, but does not grant access to any customer data beyond this knowledge. The attacker must already know the...

5.3CVSS6.8AI score0.00406EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/08/13 3:52 a.m.20 views

CVE-2024-41733 Information Disclosure Vulnerability in SAP Commerce

In SAP Commerce, valid user accounts can be identified during the customer registration and login processes. This allows a potential attacker to learn if a given e-mail is used for an account, but does not grant access to any customer data beyond this knowledge. The attacker must already know the...

5.3CVSS0.00406EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2022/05/24 5:0 p.m.12 views

Magento 2 Community Weak PRNG

Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1 uses cryptographically weak random number generator to brute-force the confirmation code for customer registration...

5.3CVSS7.1AI score0.001EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2022/05/24 5:0 p.m.19 views

GHSA-C4R2-3F9R-RWP8 Magento 2 Community Weak PRNG

Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1 uses cryptographically weak random number generator to brute-force the confirmation code for customer registration...

5.3CVSS5.7AI score0.001EPSS
Exploits0References5
Cvelist
Cvelist
added 2022/04/08 8:23 a.m.10 views

CVE-2022-27357

Ecommerce-Website v1 was discovered to contain an arbitrary file upload vulnerability via /customerregister.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

9.9AI score0.03388EPSS
Exploits3References3
Vulnerability Lab
Vulnerability Lab
added 2020/11/12 12:0 a.m.42 views

Froxlor v0.10.16 CP - (Customer) Persistent Vulnerability

Document Title: =============== Froxlor v0.10.16 CP - Customer Persistent Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2241 Release Date: ============= 2020-11-12 Vulnerability Laboratory ID VL-ID: ====================================...

0.2AI score
Exploits0
OSV
OSV
added 2020/08/27 3:15 p.m.1 views

CVE-2020-23984

Online Hotel Booking System Pro PHP Version 1.3 has Persistent Cross-site Scripting in Customer registration-form all-tags...

5.4CVSS6.1AI score0.00181EPSS
Exploits1References1
NVD
NVD
added 2020/08/27 3:15 p.m.8 views

CVE-2020-23984

Online Hotel Booking System Pro PHP Version 1.3 has Persistent Cross-site Scripting in Customer registration-form all-tags...

5.4CVSS5.5AI score0.00181EPSS
Exploits1References1
Prion
Prion
added 2020/08/27 3:15 p.m.12 views

Cross site scripting

Online Hotel Booking System Pro PHP Version 1.3 has Persistent Cross-site Scripting in Customer registration-form all-tags...

3.5CVSS5.4AI score0.00181EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder