Lucene search
+L

29 matches found

NVD
NVD
added 2007/07/31 10:17 a.m.15 views

CVE-2007-4115

Multiple cross-site scripting XSS vulnerabilities in IT!CMS itcms 0.2 allow remote attackers to inject arbitrary web script or HTML via the wndtitle parameter to 1 lang-en.php, 2 menu-ed.php, or 3 titletext-ed.php...

4.3CVSS5.8AI score0.02383EPSS
SaveExploits3References10
Cvelist
Cvelist
added 2007/07/31 10:0 a.m.31 views

CVE-2007-4115

Multiple cross-site scripting XSS vulnerabilities in IT!CMS itcms 0.2 allow remote attackers to inject arbitrary web script or HTML via the wndtitle parameter to 1 lang-en.php, 2 menu-ed.php, or 3 titletext-ed.php...

5.8AI score0.02383EPSS
SaveExploits3References10
CVE
CVE
added 2007/07/31 10:0 a.m.44 views

CVE-2007-4115

IT!CMS (itcms) 0.2 is affected by multiple XSS vulnerabilities. The flaw allows remote attackers to inject arbitrary script/HTML via the wndtitle parameter in lang-en.php, menu-ed.php, or titletext-ed.php. Root cause is not explicitly detailed in the provided documents; CVSS data indicates a MEDI...

4.3CVSS5.8AI score0.02383EPSS
SaveExploits3References10Affected Software1
exploitpack
exploitpack
added 2007/07/30 12:0 a.m.15 views

IT!CMS 0.2 - lang-en.php?wndtitle Cross-Site Scripting

IT!CMS 0.2 - lang-en.php?wndtitle Cross-Site Scripting source: https://www.securityfocus.com/bid/25129/info IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may...

6.8AI score
SaveExploits0
exploitpack
exploitpack
added 2007/07/30 12:0 a.m.15 views

IT!CMS 0.2 - titletext-ed.php?wndtitle Cross-Site Scripting

IT!CMS 0.2 - titletext-ed.php?wndtitle Cross-Site Scripting source: https://www.securityfocus.com/bid/25129/info IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker...

6.8AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/07/30 12:0 a.m.24 views

IT!CMS 0.2 - 'lang-en.php?wndtitle' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25129/info IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script code ...

4.3CVSS5.8AI score0.02383EPSS
SaveExploits3
exploitpack
exploitpack
added 2007/07/30 12:0 a.m.14 views

IT!CMS 0.2 - menu-ed.php?wndtitle Cross-Site Scripting

IT!CMS 0.2 - menu-ed.php?wndtitle Cross-Site Scripting source: https://www.securityfocus.com/bid/25129/info IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may...

6.8AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/07/30 12:0 a.m.25 views

IT!CMS 0.2 - 'titletext-ed.php?wndtitle' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25129/info IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script code ...

4.3CVSS5.8AI score0.02383EPSS
SaveExploits3
Exploit DB
Exploit DB
added 2007/07/30 12:0 a.m.26 views

IT!CMS 0.2 - 'menu-ed.php?wndtitle' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25129/info IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script code ...

4.3CVSS5.8AI score0.02383EPSS
SaveExploits3
Rows per page
Query Builder