Lucene search
+L

10 matches found

NVD
NVD
•added 2017/02/13 6:59 p.m.•23 views

CVE-2014-9760

Cross-site scripting XSS vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers to inject arbitrary web script or HTML via the username...

6.1CVSS6.1AI score0.01219EPSS
SaveExploits0References3
Mend
Mend
•added 2017/02/13 6:00 p.m.•1 views

CVE-2014-9760

Cross-site scripting XSS vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers to inject arbitrary web script or HTML via the username...

6.1CVSS0.01219EPSS
SaveExploits0References4
CVE
CVE
•added 2017/02/13 6:00 p.m.•58 views

CVE-2014-9760

GOsa contains a cross-site scripting (XSS) vulnerability in the displayLogin function (html/index.php). The vulnerability allows remote attackers to inject arbitrary web script or HTML via the username parameter. The available documents do not specify affected versions, root cause beyond the inpu...

6.1CVSS6AI score0.01219EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2017/02/13 6:00 p.m.•39 views

CVE-2014-9760

Cross-site scripting XSS vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers to inject arbitrary web script or HTML via the username...

6.1CVSS6.1AI score0.01219EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/13 12:00 a.m.•6 views

CVE-2014-9760: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers to inject arbitrary web script or HTML via the username...

6.1CVSS6AI score0.01219EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/02/13 12:00 a.m.•2 views

PT-2017-6395

Name of the Vulnerable Software and Affected Versions GOsa affected versions not specified Description A cross-site scripting XSS issue exists in the displayLogin function in html/index.php, allowing remote attackers to inject arbitrary web script or HTML via the username variable. This could...

6.1CVSS0.01219EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/07/28 12:00 a.m.•6 views

CVE-2014-5110: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in user/help/html/index.php in Fonality trixbox allows remote attackers to inject arbitrary web script or HTML via the idnodo parameter...

4.3CVSS6AI score0.01638EPSS
SaveExploits1References2
exploitpack
exploitpack
•added 2010/08/13 12:00 a.m.•22 views

MailForm 1.2 - Remote File Inclusion

MailForm 1.2 - Remote File Inclusion Exploit Title: MailForm Remote File Include Date: 14-8-2010 Author: LoSt.HaCkEr / aDaMTRoJaN Software Link: http://scripts.bdr130.net/files/any/MailForm.zip Version: v 1.2 Tested on: Windows XP CVE : هكر المسيب Contact: LoSt.HaCkEratyahoodotcom /0r/ ...

7.5AI score
SaveExploits0
NVD
NVD
•added 2009/04/03 6:30 p.m.•24 views

CVE-2008-6584

html/index.php in TorrentFlux 2.3 allows remote authenticated users to execute arbitrary code via a URL with a file containing an executable extension in the urlupload parameter, which is downloaded by TorrentFlux and can be accessed via a direct request in a html/downloads/ user directory...

6CVSS7.2AI score0.02026EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/04/03 12:00 a.m.•6 views

CVE-2008-6584: Improper Control of Generation of Code

html/index.php in TorrentFlux 2.3 allows remote authenticated users to execute arbitrary code via a URL with a file containing an executable extension in the urlupload parameter, which is downloaded by TorrentFlux and can be accessed via a direct request in a html/downloads/ user directory...

6CVSS6.5AI score0.02026EPSS
SaveExploits1References2
Rows per page
Query Builder