Lucene search
+L

7 matches found

Cvelist
Cvelist
•added 2021/05/20 5:55 p.m.•39 views

CVE-2021-27956

Zoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html/directory-search user search page via the e-mail address field...

6.1AI score0.01606EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/20 12:00 a.m.•8 views

CVE-2021-27956: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html/directory-search user search page via the e-mail address field...

6.1CVSS5.8AI score0.01606EPSS
SaveExploits1References2
NVD
NVD
•added 2017/12/20 9:29 a.m.•31 views

CVE-2017-17794

validateformpreferences in admin/preferences.php in BlogoText through 3.7.6 allows attackers to bypass intended access restrictions via vectors related to an e-mail address field...

9.8CVSS9.2AI score0.01544EPSS
SaveExploits0References2
OSV
OSV
•added 2017/12/20 9:29 a.m.•30 views

CVE-2017-17794

validateformpreferences in admin/preferences.php in BlogoText through 3.7.6 allows attackers to bypass intended access restrictions via vectors related to an e-mail address field...

9.8CVSS9.4AI score
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/20 12:00 a.m.•6 views

CVE-2017-17794: Undefined Security Weakness

validateformpreferences in admin/preferences.php in BlogoText through 3.7.6 allows attackers to bypass intended access restrictions via vectors related to an e-mail address field...

9.8CVSS8.3AI score0.01544EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/10/24 12:00 a.m.•4 views

CVE-2011-4172: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in KENT-WEB WEB FORUM before 5.1 allow remote attackers to inject arbitrary web script or HTML via 1 an e-mail address field or 2 a cookie, a related issue to CVE-2011-3383, CVE-2011-3983, and CVE-2011-3984...

4.3CVSS5.9AI score0.00855EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/27 12:00 a.m.•2 views

CVE-2009-0743: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0517.0 aka 6.0 MR4 and 7.0 before 7.02 aka 7.0 MR1 allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field...

3.5CVSS6AI score0.00896EPSS
SaveExploits1References2
Rows per page
Query Builder