Lucene search
K

6 matches found

NVD
NVD
added 2018/07/23 8:29 a.m.6 views

CVE-2018-14527

Feedback.asp in Xiao5uCompany 1.7 has XSS because the XSS protection mechanism in Safe.asp is insufficient for example, it considers SCRIPT and IMG elements, but does not consider VIDEO elements...

6.1CVSS6.1AI score0.0024EPSS
Exploits1References1
Prion
Prion
added 2018/07/23 8:29 a.m.9 views

Cross site scripting

Feedback.asp in Xiao5uCompany 1.7 has XSS because the XSS protection mechanism in Safe.asp is insufficient for example, it considers SCRIPT and IMG elements, but does not consider VIDEO elements...

4.3CVSS6AI score0.0024EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2018/07/23 8:0 a.m.38 views

CVE-2018-14527

CVE-2018-14527 affects Xiao5uCompany/“Xiao5uCompany” v1.7. Reported as an XSS vulnerability where Feedback.asp is not adequately protected by Safe.asp (e.g., it handles SCRIPT/IMG but not VIDEO). CNVD sources describe a stored XSS in School Worry-free Enterprise Website System v1.7, enabling an a...

6.1CVSS6AI score0.0024EPSS
Exploits1References1Affected Software1
Openbugbounty
Openbugbounty
added 2017/07/02 1:34 p.m.9 views

vincentbond.com XSS vulnerability

Open Bug Bounty ID: OBB-256695 Description| Value ---|--- Affected Website:| vincentbond.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2016/08/18 6:47 p.m.9 views

i-room.jp XSS vulnerability

Vulnerable URL: http://i-room.jp/Feedback.asp?LANG=E" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check i-room.jp SSL connection...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2014/09/26 2:53 p.m.12 views

aoi-tech.com XSS vulnerability

Open Bug Bounty ID: OBB-49694 Description| Value ---|--- Affected Website:| aoi-tech.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

6.4AI score
Exploits0
Rows per page
Query Builder