Lucene search
+L

6882 matches found

attackerkb
attackerkb
•added 2021/03/23 2:15 p.m.•14 views

CVE-2021-27527

A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "valueID" parameter...

4.8CVSS4.9AI score0.00786EPSS
SaveExploits1References2
Prion
Prion
•added 2021/03/23 2:15 p.m.•24 views

Cross site scripting

A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "refID" parameter...

3.5CVSS4.9AI score0.00786EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2021/03/23 2:15 p.m.•9 views

CVE-2021-27526

A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "page" parameter...

4.8CVSS4.9AI score0.00786EPSS
SaveExploits1References2
CVE
CVE
•added 2021/03/23 1:21 p.m.•67 views

CVE-2021-27526

DynPG 4.9.2 is affected by CVE-2021-27526, a cross-site scripting (XSS) vulnerability that allows remote attackers to inject JavaScript through the "page" parameter. The connected sources confirm the affected product/version and the vulnerability type, but do not provide exploitation details or a...

4.8CVSS4.9AI score0.00786EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/03/23 1:21 p.m.•35 views

CVE-2021-27526

A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "page" parameter...

5.2AI score0.00786EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/03/23 1:20 p.m.•37 views

CVE-2021-27527

A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "valueID" parameter...

5.2AI score0.00786EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/03/23 1:19 p.m.•42 views

CVE-2021-27530

A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allow remote attacker to inject javascript via URI in /index.php...

5.2AI score0.00786EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/03/23 1:16 p.m.•29 views

CVE-2021-27531

A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "query" parameter...

5.2AI score0.0083EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/03/23 1:15 p.m.•39 views

CVE-2021-27529

A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "limit" parameter...

5.2AI score0.00786EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/23 12:00 a.m.•7 views

CVE-2021-27530: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allow remote attacker to inject javascript via URI in /index.php...

4.8CVSS5.7AI score0.00786EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/03/23 12:00 a.m.•26 views

OpenSourceCMS.com Clansphere CMS Cross-Site Script Vulnerability

ClanSphere is a modular Web-CMS. A cross-site scripting vulnerability exists in Clansphere 2011.4. The vulnerability can be exploited to inject JavaScript via the "module" parameter...

6.1CVSS5.8AI score0.01969EPSS
SaveExploits2References2
CNVD
CNVD
•added 2021/03/23 12:00 a.m.•48 views

PunBB Cross-Site Scripting Vulnerability (CNVD-2021-22158)

PunBB is a lightweight PHP-based forum system distributed under the GNU General Public License. A cross-site scripting vulnerability exists in the email BBcode tag in versions of PunBB prior to 1.4.6. An attacker can exploit this vulnerability to inject arbitrary JavaScript into any forum message...

5.4CVSS6AI score0.00538EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/03/22 4:15 p.m.•18 views

CVE-2021-28968

An issue was discovered in PunBB before 1.4.6. An XSS vulnerability in the email BBcode tag allows with authentication injecting arbitrary JavaScript into any forum message...

5.4CVSS6.2AI score0.00538EPSS
SaveExploits0References1
NVD
NVD
•added 2021/03/22 3:15 p.m.•33 views

CVE-2021-27308

A cross-site scripting XSS vulnerability in the admin login panel in 4images version 1.8 allows remote attackers to inject JavaScript via the "redirect" parameter...

4.8CVSS0.01994EPSS
SaveExploits4References2
Prion
Prion
•added 2021/03/22 3:15 p.m.•27 views

Cross site scripting

A cross-site scripting XSS vulnerability in the admin login panel in 4images version 1.8 allows remote attackers to inject JavaScript via the "redirect" parameter...

3.5CVSS4.9AI score0.01994EPSS
SaveExploits4References2Affected Software1
Cvelist
Cvelist
•added 2021/03/22 2:49 p.m.•43 views

CVE-2021-27308

A cross-site scripting XSS vulnerability in the admin login panel in 4images version 1.8 allows remote attackers to inject JavaScript via the "redirect" parameter...

5.1AI score0.01994EPSS
SaveExploits4References2
CNVD
CNVD
•added 2021/03/22 12:00 a.m.•35 views

FUDForum cross-site scripting vulnerability (CNVD-2021-22862)

FUDforum is an open source forum system built on PHP+MySQL/PostgreSQL. A cross-site scripting vulnerability exists in FUDForum 3.1.0. An attacker can exploit this vulnerability to inject JavaScript via the srch parameter in index.php...

6.1CVSS5.8AI score0.07604EPSS
SaveExploits5References1
CNVD
CNVD
•added 2021/03/22 12:00 a.m.•90 views

FUDForum cross-site scripting vulnerability (CNVD-2021-22864)

FUDforum is an open source forum system built on PHP+MySQL/PostgreSQL. A cross-site scripting vulnerability exists in FUDForum 3.1.0. An attacker can exploit this vulnerability to inject JavaScript via the author parameter in index.php...

6.1CVSS5.8AI score0.06396EPSS
SaveExploits4References1
CNNVD
CNNVD
•added 2021/03/22 12:00 a.m.•18 views

Piyush Patil 4images Cross-site Scripting Vulnerability

4images is an open source image management system. 4images 1.8 version of the cross-site scripting vulnerability , the vulnerability stems from the redirect parameter does not do effective filtering of user input , a remote attacker can use this vulnerability to inject JavaScript...

4.8CVSS5.3AI score0.01994EPSS
SaveExploits4References5
NVD
NVD
•added 2021/03/19 7:15 p.m.•45 views

CVE-2021-27520

A cross-site scripting XSS issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter...

6.1CVSS0.06396EPSS
SaveExploits4References2
Rows per page
Query Builder