Lucene search
+L

11 matches found

Positive Technologies
Positive Technologies
•added 2026/08/30 12:00 a.m.•28 views

PT-2026-83530

Name of the Vulnerable Software and Affected Versions Coppermine Photo Gallery versions prior to 1.6.29 Description A remote cross site scripting issue exists within the Hidden Album Update Endpoint in the db input.php file. Cross site scripting is a technique where malicious scripts are injected...

5.1CVSS5AI score0.00348EPSS
SaveExploits0References12
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•30 views

MataChat 'input.php' Multiple Cross Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/34722/info MataChat is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser ...

7.1AI score
SaveExploits0
Prion
Prion
•added 2009/05/12 4:30 p.m.•19 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in input.php in MataChat allow remote attackers to inject arbitrary web script or HTML via the 1 nickname and 2 color parameters...

4.3CVSS6.1AI score0.01189EPSS
SaveExploits2References2
NVD
NVD
•added 2009/05/12 4:30 p.m.•29 views

CVE-2009-1620

Multiple cross-site scripting XSS vulnerabilities in input.php in MataChat allow remote attackers to inject arbitrary web script or HTML via the 1 nickname and 2 color parameters...

4.3CVSS5.8AI score0.01189EPSS
SaveExploits2References2
CVE
CVE
•added 2009/05/12 4:00 p.m.•54 views

CVE-2009-1620

CVE-2009-1620 affects MataChat’s input.php, with multiple XSS vulnerabilities exploitable via the nickname and color parameters. The CVE record documents input-based script/HTML injection due to insufficient input sanitization, enabling remote attackers to inject arbitrary script in the context o...

4.3CVSS5.9AI score0.01189EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
•added 2009/05/12 4:00 p.m.•33 views

CVE-2009-1620

Multiple cross-site scripting XSS vulnerabilities in input.php in MataChat allow remote attackers to inject arbitrary web script or HTML via the 1 nickname and 2 color parameters...

5.8AI score0.01189EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/05/12 12:00 a.m.•6 views

CVE-2009-1620: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in input.php in MataChat allow remote attackers to inject arbitrary web script or HTML via the 1 nickname and 2 color parameters...

4.3CVSS5.8AI score0.01189EPSS
SaveExploits2References2
Exploit DB
Exploit DB
•added 2009/04/27 12:00 a.m.•34 views

MataChat - 'input.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/34722/info MataChat is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

4.3CVSS5.8AI score0.01189EPSS
SaveExploits2
exploitpack
exploitpack
•added 2009/04/27 12:00 a.m.•29 views

MataChat - input.php Multiple Cross-Site Scripting Vulnerabilities

MataChat - input.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/34722/info MataChat is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

0.2AI score
SaveExploits0
UbuntuCve
UbuntuCve
•added 2008/02/14 11:00 p.m.•34 views

CVE-2008-0783

Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote attackers to inject arbitrary web script or HTML via 1 the viewtype parameter to graph.php; 2 the filter parameter to graphview.php; 3 the action parameter to the drawnavigationtext...

4.3CVSS5.9AI score0.05246EPSS
SaveExploits3References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/05/19 12:00 a.m.•6 views

CVE-2004-2085: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Brad Fears phpCodeCabinet 0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple parameters, including 1 the sid parameter to comments.php, 2 the cid, cf, or rfd parameters to category.php, or the cid paramet...

4.3CVSS5.8AI score0.01953EPSS
SaveExploits0References1
Rows per page
Query Builder