2 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the GetCurrentCompletePath function in phpmyvisites.php in phpMyVisites before 2.2 allows remote attackers to inject arbitrary web script or HTML via the query string...
4.3CVSS6.1AI score0.01395EPSS
SaveExploits0References7Affected Software1
CVE-2007-0891
CVE-2007-0891 affects phpMyVisites prior to 2.2. The XSS vulnerability resides in GetCurrentCompletePath in phpmyvisites.php, allowing remote attackers to inject arbitrary script/HTML via the query string. Impact: possible client-side script execution. Remediation: upgrade to version 2.2 or later...
4.3CVSS5.7AI score0.01395EPSS
SaveExploits0References7Affected Software1
20