2 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via 1 the pcd parameter to editbug.aspx, 2 the bugid parameter to editcomment.aspx, 3 the id parameter to edituserpermissions2.aspx, or 4 the...
3.5CVSS5.6AI score0.028EPSS
SaveExploits6References6Affected Software1
CVE-2010-3266: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via 1 the pcd parameter to editbug.aspx, 2 the bugid parameter to editcomment.aspx, 3 the id parameter to edituserpermissions2.aspx, or 4 the...
3.5CVSS5.9AI score0.028EPSS
SaveExploits6References2
20