Lucene search
+L

11 matches found

Positive Technologies
Positive Technologies
•added 2026/08/30 12:00 a.m.•33 views

PT-2026-83530

Name of the Vulnerable Software and Affected Versions Coppermine Photo Gallery versions prior to 1.6.29 Description A remote cross site scripting issue exists within the Hidden Album Update Endpoint in the db input.php file. Cross site scripting is a technique where malicious scripts are injected...

5.1CVSS4.5AI score0.00348EPSS
SaveExploits0References12
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•32 views

MataChat 'input.php' Multiple Cross Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/34722/info MataChat is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser ...

7.1AI score
SaveExploits0
Prion
Prion
•added 2009/05/12 4:30 p.m.•21 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in input.php in MataChat allow remote attackers to inject arbitrary web script or HTML via the 1 nickname and 2 color parameters...

4.3CVSS6.1AI score0.01189EPSS
SaveExploits2References2
NVD
NVD
•added 2009/05/12 4:30 p.m.•29 views

CVE-2009-1620

Multiple cross-site scripting XSS vulnerabilities in input.php in MataChat allow remote attackers to inject arbitrary web script or HTML via the 1 nickname and 2 color parameters...

4.3CVSS5.8AI score0.01189EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2009/05/12 4:00 p.m.•38 views

CVE-2009-1620

Multiple cross-site scripting XSS vulnerabilities in input.php in MataChat allow remote attackers to inject arbitrary web script or HTML via the 1 nickname and 2 color parameters...

5.8AI score0.01189EPSS
SaveExploits2References2
CVE
CVE
•added 2009/05/12 4:00 p.m.•57 views

CVE-2009-1620

CVE-2009-1620 affects MataChat’s input.php, with multiple XSS vulnerabilities exploitable via the nickname and color parameters. The CVE record documents input-based script/HTML injection due to insufficient input sanitization, enabling remote attackers to inject arbitrary script in the context o...

4.3CVSS5.9AI score0.01189EPSS
SaveExploits2References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/05/12 12:00 a.m.•9 views

CVE-2009-1620: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in input.php in MataChat allow remote attackers to inject arbitrary web script or HTML via the 1 nickname and 2 color parameters...

4.3CVSS5.8AI score0.01189EPSS
SaveExploits2References2
exploitpack
exploitpack
•added 2009/04/27 12:00 a.m.•30 views

MataChat - input.php Multiple Cross-Site Scripting Vulnerabilities

MataChat - input.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/34722/info MataChat is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

0.2AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2009/04/27 12:00 a.m.•36 views

MataChat - 'input.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/34722/info MataChat is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

4.3CVSS5.8AI score0.01189EPSS
SaveExploits2
UbuntuCve
UbuntuCve
•added 2008/02/14 11:00 p.m.•35 views

CVE-2008-0783

Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote attackers to inject arbitrary web script or HTML via 1 the viewtype parameter to graph.php; 2 the filter parameter to graphview.php; 3 the action parameter to the drawnavigationtext...

4.3CVSS5.9AI score0.05246EPSS
SaveExploits3References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/05/19 12:00 a.m.•11 views

CVE-2004-2085: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Brad Fears phpCodeCabinet 0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple parameters, including 1 the sid parameter to comments.php, 2 the cid, cf, or rfd parameters to category.php, or the cid paramet...

4.3CVSS5.8AI score0.01953EPSS
SaveExploits0References1
Rows per page
Query Builder