Lucene search
K

6 matches found

NVD
NVD
added 2019/08/05 6:15 p.m.10 views

CVE-2019-11198

Multiple cross-site scripting XSS vulnerabilities in Sitecore CMS 9.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 300583 - List Manager Dashboard module, 2 307638 - Campaign Creator module, 3 316994 - Attributes field, 4 I316995 - Icon Selection module, 5...

6.1CVSS6.1AI score0.0026EPSS
Exploits0References2
OSV
OSV
added 2019/08/05 6:15 p.m.1 views

CVE-2019-11198

Multiple cross-site scripting XSS vulnerabilities in Sitecore CMS 9.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 300583 - List Manager Dashboard module, 2 307638 - Campaign Creator module, 3 316994 - Attributes field, 4 I316995 - Icon Selection module, 5...

6.1CVSS6.4AI score
Exploits0References2
Prion
Prion
added 2019/08/05 6:15 p.m.14 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Sitecore CMS 9.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 300583 - List Manager Dashboard module, 2 307638 - Campaign Creator module, 3 316994 - Attributes field, 4 I316995 - Icon Selection module, 5...

4.3CVSS6AI score0.0026EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/08/05 5:13 p.m.15 views

CVE-2019-11198

Multiple cross-site scripting XSS vulnerabilities in Sitecore CMS 9.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 300583 - List Manager Dashboard module, 2 307638 - Campaign Creator module, 3 316994 - Attributes field, 4 I316995 - Icon Selection module, 5...

6.1AI score0.0026EPSS
Exploits0References2
Packet Storm
Packet Storm
added 2005/03/17 12:0 a.m.17 views

pabox20.txt

pabox 2.0 no longer includes the Date and Time parameters in the POST data sent with your shout. The date and time parameters in previous versions were vulnerable to a cross site scripting attack. Now however in version 2.0 if you setup paBox to include an icon with your topic... eg: :winkface:...

7.4AI score
Exploits0
securityvulns
securityvulns
added 2005/03/16 12:0 a.m.27 views

[XSS] paBox 2.0

pabox 2.0 no longer includes the Date and Time parameters in the POST data sent with your shout. The date and time parameters in previous versions were vulnerable to a cross site scripting attack. Now however in version 2.0 if you setup paBox to include an icon with your topic... eg: :winkface:...

1.3AI score
Exploits0
Rows per page
Query Builder