3 matches found
CVE-2019-15053
The "HTML Include and replace macro" plugin before 1.5.0 for Confluence Server allows a bypass of the includeScripts=false XSS protection mechanism via vectors involving an IFRAME element...
6.8CVSS6.7AI score0.0132EPSS
SaveExploits2References2
CVE-2005-2463
Kayako LiveResponse 2.x vulnerability (CVE-2005-2463) lets remote attackers obtain sensitive information by directly requesting addressbook.php and other include scripts, with the path exposed in an error message. Affected software: Kayako LiveResponse 2.x. Impact: information disclosure with par...
6.4CVSS6.1AI score0.01471EPSS
SaveExploits1References5Affected Software1
20