Lucene search
K

8 matches found

CNNVD
CNNVD
added 2023/01/01 12:0 a.m.1 views

Ingnovarq 跨站脚本漏洞

Ingnovarq is a repository containing the source code of Ingnovarq by the individual developer Andrés David Montoya Aguirre. A cross-site scripting vulnerability exists in Ingnovarq, which stems from misuse of the parameter imagetitle leading to cross-site scripting...

6.1CVSS4.3AI score0.0025EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/01/01 12:0 a.m.3 views

PT-2023-10185 · Unknown · Admont28 Ingnovarq

Name of the Vulnerable Software and Affected Versions: admont28 Ingnovarq affected versions not specified Description: A problematic issue has been found in admont28 Ingnovarq, affecting some unknown functionality of the file app/controller/insertarSliderAjax.php. The manipulation of the imagetit...

6.1CVSS4.3AI score0.0025EPSS
Exploits0References7
CNVD
CNVD
added 2015/09/09 12:0 a.m.2 views

LEMON-S PHP Twit BBS Cross-Site Scripting Vulnerability

LEMON-S PHP Twit BBS is a PHP-based electronic bulletin board BBS forum. A cross-site scripting vulnerability exists in the index.php script in LEMON-S PHP Twit BBS. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of the 'imagetitle' parameter...

4.3CVSS6AI score0.00248EPSS
Exploits0References1
NVD
NVD
added 2015/09/07 2:59 p.m.10 views

CVE-2015-2989

Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Twit BBS allows remote attackers to inject arbitrary web script or HTML via the imagetitle parameter...

4.3CVSS5.8AI score0.00248EPSS
Exploits0References2
Prion
Prion
added 2015/09/07 2:59 p.m.12 views

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Twit BBS allows remote attackers to inject arbitrary web script or HTML via the imagetitle parameter...

4.3CVSS6.2AI score0.00248EPSS
Exploits0References2
Cvelist
Cvelist
added 2015/09/07 2:0 p.m.15 views

CVE-2015-2989

Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Twit BBS allows remote attackers to inject arbitrary web script or HTML via the imagetitle parameter...

5.8AI score0.00248EPSS
Exploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2015/09/01 5:18 a.m.2 views

Twit BBS vulnerable to cross-site scripting

Overview Twit BBS provided by LEMON-S PHP contains a persistent cross-site scripting CWE-79 vulnerability due to the processing of imagetitle parameter in index.php. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

5CVSS6.2AI score0.00248EPSS
Exploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2015/09/01 12:0 a.m.28 views

JVN#77193915: Twit BBS vulnerable to cross-site scripting

Twit BBS provided by LEMON-S PHP contains a persistent cross-site scripting CWE-79 vulnerability due to the processing of imagetitle parameter in index.php. Impact An arbitrary script may be executed on the user's web browser. Solution Do not use Twit BBS Twit BBS is no longer being developed or...

4.3CVSS6.1AI score0.00248EPSS
Exploits0
Rows per page
Query Builder