EUVD-2020-10207

Malware in sbrugna...

CVE-2020-18280

Cross Site Scripting vulnerability found in Phodal CMD v.1.0 allows a local attacker to execute arbitrary code via the EMBED SRC function...

CVE-2020-18280

Cross Site Scripting vulnerability found in Phodal CMD v.1.0 allows a local attacker to execute arbitrary code via the EMBED SRC function...

Cross site scripting

Cross Site Scripting vulnerability found in Phodal CMD v.1.0 allows a local attacker to execute arbitrary code via the EMBED SRC function...

CVE-2020-18280

Cross Site Scripting vulnerability found in Phodal CMD v.1.0 allows a local attacker to execute arbitrary code via the EMBED SRC function...

CVE-2020-18280

Cross Site Scripting vulnerability found in Phodal CMD v.1.0 allows a local attacker to execute arbitrary code via the EMBED SRC function...

CVE-2020-18280: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability found in Phodal CMD v.1.0 allows a local attacker to execute arbitrary code via the EMBED SRC function...

CVE-2020-18280

Phodal CMD v.1.0 is affected by a Cross Site Scripting vulnerability that allows a local attacker to execute arbitrary code via the EMBED SRC function. Affected component: Phodal CMD, version 1.0. Root cause: EMBED SRC function enables code execution through XSS. In the available documents, explo...

PT-2023-11487 · Unknown · Phodal Cmd

Name of the Vulnerable Software and Affected Versions: Phodal CMD version 1.0 Description: A Cross Site Scripting issue allows a local attacker to execute arbitrary code via the EMBED SRC function. This enables the attacker to perform unauthorized actions on the system. Recommendations: For Phoda...

CVE-2019-9736

DOM-based XSS exists in 1024Tools Markdown 1.0 via vectors involving the 'EMBED SRC="data:image/svg+xml' substring...

PT-2019-19832

Name of the Vulnerable Software and Affected Versions jimmykuu Gopher version 2.0 Description The issue involves a DOM-based XSS that can be exploited through specific vectors, including the ' tag with SRC attributes containing data:image/svg+xml substrings until a patch is available. Restrict...

VulnCheck KEV: CVE-2006-0005

Buffer overflow in the plug-in for Microsoft Windows Media Player WMP 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src...