Lucene search
+L

6 matches found

RubySec
RubySec
•added 2020/09/09 12:00 a.m.•58 views

Potential XSS vulnerability in Action View

There is a potential Cross-Site Scripting XSS vulnerability in Action View's translation helpers. Views that allow the user to control the default not found value of the t and translate helpers could be susceptible to XSS attacks. Impact ------ When an HTML-unsafe string is passed as the default...

6.1CVSS6.9AI score0.02372EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2018/04/12 4:29 p.m.•36 views

CVE-2018-10061

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENTQUOTES flag these calls occur when the htmlescape function in lib/html.php is not used...

5.4CVSS5.5AI score
SaveExploits0References4
OSV
OSV
•added 2018/04/12 4:29 p.m.•6 views

DEBIAN-CVE-2018-10061

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENTQUOTES flag these calls occur when the htmlescape function in lib/html.php is not used...

5.4CVSS6.3AI score0.01053EPSS
SaveExploits1References1
Prion
Prion
•added 2018/04/12 4:29 p.m.•27 views

Design/Logic Flaw

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENTQUOTES flag these calls occur when the htmlescape function in lib/html.php is not used...

3.5CVSS5.5AI score0.01053EPSS
SaveExploits1References4Affected Software2
Debian CVE
Debian CVE
•added 2018/04/12 4:00 p.m.•57 views

CVE-2018-10061

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENTQUOTES flag these calls occur when the htmlescape function in lib/html.php is not used...

5.4CVSS5.2AI score0.01053EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/12 12:00 a.m.•1 views

CVE-2018-10061: Improper Neutralization of Input During Web Page Generation

Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENTQUOTES flag these calls occur when the htmlescape function in lib/html.php is not used...

5.4CVSS5.9AI score0.01053EPSS
SaveExploits1References2
Rows per page
Query Builder