Lucene search
K

108 matches found

Cvelist
Cvelist
added 2021/04/15 1:51 p.m.22 views

CVE-2021-27672

SQL Injection in the "adminboxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to obtain sesnitive database information by injecting SQL commands into the "cID" parameter when creating a new HTML component...

5.9AI score0.01327EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/04/15 12:0 a.m.2 views

Zenario CMS SQL注入漏洞

Zenario CMS is a Zenario open source application . Provides a Web-based content management system. A security vulnerability exists in Zenario CMS v8.8.52729, which originates from adminboxes.ajax.php, and allows remote attackers to create a new HTML component by injecting SQL commands in the "cID...

4.9CVSS5.7AI score0.01327EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/04/15 12:0 a.m.2 views

Zenario CMS 跨站脚本漏洞

Zenario CMS is a Zenario open source application . It provides a web-based content management system. A security vulnerability exists in Tribal Systems Zenario CMS v8.8.52729, which can be exploited by a remote attacker to execute arbitrary code by injecting arbitrary HTML in the "cID" parameter...

4.8CVSS6AI score0.01089EPSS
Exploits4References4
BDU FSTEC
BDU FSTEC
added 2020/06/26 12:0 a.m.3 views

The vulnerability of the MSHTML mechanism in the Internet Explorer browser allows a hacker to execute arbitrary code.

The vulnerability of the MSHTML mechanism in Internet Explorer is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.6CVSS7.2AI score0.07175EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2009/10/14 10:0 a.m.12 views

CVE-2009-2529

Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not properly handle argument validation for unspecified variables, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "HTML Component Handling Vulnerability."...

7.3AI score0.19533EPSS
Exploits1References3
CVE
CVE
added 2009/10/14 10:0 a.m.67 views

CVE-2009-2529

CVE-2009-2529 affects Microsoft Internet Explorer versions 5.01 SP4, 6, 6 SP1, 7, and 8. The vulnerability arises from improper argument validation for unspecified variables in HTML component handling, enabling remote code execution via a crafted HTML document. Public information in connected KB ...

9.3CVSS7.2AI score0.19533EPSS
Exploits1References3Affected Software2
NVD
NVD
added 2008/08/13 12:42 p.m.21 views

CVE-2008-2259

Microsoft Internet Explorer 6 and 7 does not perform proper "argument validation" during print preview, which allows remote attackers to execute arbitrary code via unknown vectors, aka "HTML Component Handling Vulnerability."...

9.3CVSS7.5AI score0.3008EPSS
Exploits5References8
Prion
Prion
added 2008/08/13 12:42 p.m.26 views

Design/Logic Flaw

Microsoft Internet Explorer 6 and 7 does not perform proper "argument validation" during print preview, which allows remote attackers to execute arbitrary code via unknown vectors, aka "HTML Component Handling Vulnerability."...

9.3CVSS8AI score0.3008EPSS
Exploits5References8Affected Software1
Rows per page
Query Builder