Lucene search
+L

383 matches found

OSV
OSV
•added 2018/01/14 4:29 a.m.•18 views

CVE-2018-5690

Cross-site scripting XSS vulnerability in admin/users.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the nb parameter aka the page limit number...

5.4CVSS5.6AI score
SaveExploits0References2
Prion
Prion
•added 2018/01/14 4:29 a.m.•21 views

Cross site scripting

Cross-site scripting XSS vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the malicious user's email...

3.5CVSS5AI score0.00904EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2018/01/14 4:29 a.m.•29 views

CVE-2018-5689

Cross-site scripting XSS vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the malicious user's email...

5.4CVSS5.1AI score0.00904EPSS
SaveExploits0References2
OSV
OSV
•added 2018/01/14 4:29 a.m.•23 views

UBUNTU-CVE-2018-5690

Cross-site scripting XSS vulnerability in admin/users.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the nb parameter aka the page limit number...

5.4CVSS6.2AI score0.00904EPSS
SaveExploits0References4
OSV
OSV
•added 2018/01/14 4:29 a.m.•17 views

UBUNTU-CVE-2018-5689

Cross-site scripting XSS vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the malicious user's email...

5.4CVSS5.9AI score0.00904EPSS
SaveExploits0References4
OSV
OSV
•added 2018/01/14 4:29 a.m.•19 views

CVE-2018-5689

Cross-site scripting XSS vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the malicious user's email...

5.4CVSS5.6AI score
SaveExploits0References2
CVE
CVE
•added 2018/01/14 4:00 a.m.•72 views

CVE-2018-5690

CVE-2018-5690 is an XSS vulnerability in Dotclear 2.12.1 affecting the admin/users.php page. The issue occurs when processing the nb parameter (page limit number), allowing remote authenticated users to inject arbitrary web script or HTML. The affected component is the admin interface (users mana...

5.4CVSS6AI score0.00904EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2018/01/14 4:00 a.m.•44 views

CVE-2018-5690

Cross-site scripting XSS vulnerability in admin/users.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the nb parameter aka the page limit number...

5.1AI score0.00904EPSS
SaveExploits0References2
Mend
Mend
•added 2018/01/14 4:00 a.m.•5 views

CVE-2018-5690

Cross-site scripting XSS vulnerability in admin/users.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the nb parameter aka the page limit number...

5.4CVSS0.00904EPSS
SaveExploits0References3
CVE
CVE
•added 2018/01/14 4:00 a.m.•56 views

CVE-2018-5689

CVE-2018-5689 affects Dotclear 2.12.1, specifically the admin/auth.php vulnerability. The issue is a Cross-site Scripting (XSS) flaw in which remote authenticated users can inject arbitrary web script or HTML via the malicious user’s email. The root cause, impacted component, and context are stat...

5.4CVSS5AI score0.00904EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2018/01/14 4:00 a.m.•35 views

CVE-2018-5689

Cross-site scripting XSS vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the malicious user's email...

5.1AI score0.00904EPSS
SaveExploits0References2
Mend
Mend
•added 2018/01/14 4:00 a.m.•4 views

CVE-2018-5689

Cross-site scripting XSS vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the malicious user's email...

5.4CVSS0.00904EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/14 12:00 a.m.•7 views

CVE-2018-5690: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/users.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the nb parameter aka the page limit number...

5.4CVSS6AI score0.00904EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/01/14 12:00 a.m.•8 views

PT-2018-17087

Name of the Vulnerable Software and Affected Versions: Dotclear version 2.12.1 Description: A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the nb parameter, which is also known as the page limit number, in the admin/users.php file...

5.4CVSS0.00904EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/14 12:00 a.m.•7 views

CVE-2018-5689: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the malicious user's email...

5.4CVSS6AI score0.00904EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/01/14 12:00 a.m.•3 views

PT-2018-17086

Name of the Vulnerable Software and Affected Versions: Dotclear version 2.12.1 Description: A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via a malicious user's email. Recommendations: For Dotclear version 2.12.1, update to a version tha...

5.4CVSS0.00904EPSS
SaveExploits0References8
NVD
NVD
•added 2017/03/05 9:59 p.m.•30 views

CVE-2017-6446

XSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the sortby and order parameters...

6.1CVSS6AI score0.00672EPSS
SaveExploits0References2
OSV
OSV
•added 2017/03/05 9:59 p.m.•34 views

UBUNTU-CVE-2017-6446

XSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the sortby and order parameters...

6.1CVSS5.8AI score0.00672EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2017/03/05 9:59 p.m.•42 views

CVE-2017-6446

XSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the sortby and order parameters...

6.1CVSS6.3AI score0.00672EPSS
SaveExploits0References2
Prion
Prion
•added 2017/03/05 9:59 p.m.•22 views

Cross site scripting

XSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the sortby and order parameters...

4.3CVSS6AI score0.00672EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder