Lucene search
K

28 matches found

Prion
Prion
added 2018/04/12 4:29 p.m.21 views

Design/Logic Flaw

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENTQUOTES flag these calls occur when the htmlescape function in lib/html.php is not used...

3.5CVSS5.5AI score0.00955EPSS
Exploits1References4Affected Software2
UbuntuCve
UbuntuCve
added 2018/04/12 4:29 p.m.27 views

CVE-2018-10061

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENTQUOTES flag these calls occur when the htmlescape function in lib/html.php is not used...

5.4CVSS6.4AI score0.00955EPSS
Exploits1References2
OSV
OSV
added 2018/04/12 4:29 p.m.27 views

CVE-2018-10061

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENTQUOTES flag these calls occur when the htmlescape function in lib/html.php is not used...

5.4CVSS5.5AI score
Exploits0References4
Debian CVE
Debian CVE
added 2018/04/12 4:0 p.m.24 views

CVE-2018-10061

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENTQUOTES flag these calls occur when the htmlescape function in lib/html.php is not used...

5.4CVSS5.2AI score0.00955EPSS
Exploits1
Openbugbounty
Openbugbounty
added 2018/03/05 1:14 p.m.6 views

iwinhome.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-574273 Description| Value ---|--- Affected Website:| iwinhome.co.kr Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

6.4AI score
Exploits0
CVE
CVE
added 2010/08/23 8:0 p.m.83 views

CVE-2010-2545

Cacti before 0.8.7g contains multiple XSS vulnerabilities (including CVE-2010-2545) in various templates and admin paths. The GLSA notes remote script injection and the need to upgrade to the 0.8.8+ series as remediation; affected vectors include template name and numerous PHP/graph-related compo...

4.3CVSS5.2AI score0.01797EPSS
Exploits1References14Affected Software1
Exploit DB
Exploit DB
added 2008/01/06 12:0 a.m.37 views

CuteNews 1.1.1 - 'html.php' Remote Code Execution

---- CuteNews Remote Code Execution ... ITDefence.ru Antichat.ru Strawberry CuteNews Remote Code Execution Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ / / / / / / / / / / / //\ \ / / / / // / // / /\ / // 2007 //// // //\ \ \...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2008/01/06 12:0 a.m.23 views

CuteNews 1.1.1 - html.php Remote Code Execution

CuteNews 1.1.1 - html.php Remote Code Execution ---- CuteNews Remote Code Execution ... ITDefence.ru Antichat.ru Strawberry CuteNews Remote Code Execution Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ / / / / / / / / / / / //\ \ / / /...

0.4AI score
Exploits0
Rows per page
Query Builder