CVE-2026-7015

MaxSite CMS (up to 109.3) is affected via the Guestbook Plugin due to improper handling of f_text, f_slug, f_limit, and f_email, enabling cross-site scripting. The issue can be exploited remotely and the public exploit has been disclosed. A fixed patch is available in version 109.4, with patch id...

MaxSite CMS 跨站脚本漏洞

MaxSite CMS is an open-source website content management system developed by MaxSite in Russia. Versions of MaxSite CMS starting from 109.3 and earlier had a cross-site scripting vulnerability. This vulnerability stemmed from operations with the ftext/fslug/flimit/femail parameters in the Guestbo...

CVE-2026-7015: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in MaxSite CMS up to 109.3. This issue affects some unknown processing of the component Guestbook Plugin. Such manipulation of the argument ftext/fslug/flimit/femail leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed t...

EUVD-2013-2562

Malware in sbrugna...

CVE-2013-2623

Cross-site Scripting XSS in Telaen before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the "femail" parameter in index.php...

CVE-2013-2623

Cross-site Scripting XSS in Telaen before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the "femail" parameter in index.php...

CVE-2013-2623: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS in Telaen before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the "femail" parameter in index.php...

AnyMacro邮件系统 login.php POST参数F_email SQL注入漏洞

No description provided by source...

CVE-2012-1935: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before 4 RC4 allow remote attackers to inject arbitrary web script or HTML via the 1 Back parameter to admin/ad.php, or the 2 token or 3 femail parameter to admin/passwordchecktoken.php...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Uebimiau 2.7.2 through 2.7.10 allows remote attackers to inject arbitrary web script or HTML via the femail parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-5235

Cross-site scripting XSS vulnerability in index.php in Uebimiau 2.7.2 through 2.7.10 allows remote attackers to inject arbitrary web script or HTML via the femail parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-5235: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Uebimiau 2.7.2 through 2.7.10 allows remote attackers to inject arbitrary web script or HTML via the femail parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-5235

The CVE-2007-5235 entry describes a Cross-site Scripting (XSS) vulnerability in Uebimiau, specifically in index.php for versions 2.7.2 through 2.7.10. The issue allows remote attackers to inject arbitrary web script or HTML via the f_email parameter. The provided documents do not include explicit...