Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 7:22 a.m.•15 views

CVE-2024-41353

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\groups\edit-group.php...

7.1CVSS6.1AI score0.00345EPSS
SaveExploits1References1
NVD
NVD
•added 2024/07/26 5:15 p.m.•23 views

CVE-2024-41353

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\groups\edit-group.php...

7.1CVSS0.00345EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/07/26 12:00 a.m.•32 views

CVE-2024-41353

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\groups\edit-group.php...

0.00345EPSS
SaveExploits1References1
CVE
CVE
•added 2024/07/26 12:00 a.m.•96 views

CVE-2024-41353

The phpIPAM IP address management web application, version 1.6 , is vulnerable to Cross-Site Scripting (XSS) . The root cause is the lack of protective measures for the website structure within the app\admin\groups\edit-group.php file. A remote attacker can exploit this flaw to conduct XSS attack...

7.1CVSS6.2AI score0.00345EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/07/26 12:00 a.m.•16 views

CVE-2024-41353

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\groups\edit-group.php...

6.2AI score0.00345EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/26 12:00 a.m.•4 views

CVE-2024-41353: Improper Neutralization of Input During Web Page Generation

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\groups\edit-group.php...

7.1CVSS5.5AI score0.00345EPSS
SaveExploits1References1
Prion
Prion
•added 2020/03/12 2:15 p.m.•31 views

Cross site scripting

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-group.php by adding a question mark ? followed by the payload...

3.5CVSS4.9AI score0.00611EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/12 12:00 a.m.•7 views

CVE-2020-10406: Improper Neutralization of Input During Web Page Generation

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-group.php by adding a question mark ? followed by the payload...

4.8CVSS5.7AI score0.00611EPSS
SaveExploits1References2
Rows per page
Query Builder