Lucene search
K

61 matches found

RedhatCVE
RedhatCVE
added 2026/02/21 7:29 p.m.1 views

CVE-2026-27502

SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in log.php via the search query parameter. The application embeds the unsanitized parameter value directly into an HTML input value attribute, allowing an unauthenticated remote attacker to inject and execute...

6.1CVSS5.6AI score0.00056EPSS
Exploits0References1
NVD
NVD
added 2026/02/20 5:25 p.m.3 views

CVE-2026-27502

SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in log.php via the search query parameter. The application embeds the unsanitized parameter value directly into an HTML input value attribute, allowing an unauthenticated remote attacker to inject and execute...

6.1CVSS0.00056EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/20 12:0 a.m.3 views

SVXportal 安全漏洞

SVXportal is a portal website developed by Peter as an individual developer. Versions of SVXportal 2.5 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the lack of validation for the search query parameter in the log.php file, which could lead to reflection-type...

6.1CVSS5.7AI score0.00056EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/02/20 12:0 a.m.2 views

PT-2026-21271

SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in log.php via the search query parameter. The application embeds the unsanitized parameter value directly into an HTML input value attribute, allowing an unauthenticated remote attacker to inject and execute...

5.1CVSS5.6AI score0.00056EPSS
Exploits0References3
CVE
CVE
added 2025/10/13 1:2 a.m.5 views

CVE-2025-11654

CVE-2025-11654 affects yousaf530 Inferno Online Clothing Store. The vulnerability is a SQL injection in an unknown function within /log.php, triggered by manipulating the cemail/password parameters. A remote attacker could exploit it; public PoCs are noted in multiple feeds, and affected versions...

7.5CVSS7.3AI score0.00029EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2016-1729

Malware in sbrugna...

9.8CVSS9.5AI score0.00292EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2016-3592

Malware in sbrugna...

6.1CVSS6.4AI score0.00544EPSS
Exploits4References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2007-5238

Malware in sbrugna...

7.5CVSS6.4AI score0.00713EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-25663

Malware in sbrugna...

9.8CVSS9.2AI score0.00264EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-9704

Malware in sbrugna...

6.1CVSS6.3AI score0.0021EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-4194

Malware in sbrugna...

6.1CVSS6.3AI score0.0024EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-53623

Malicious code in bioql PyPI...

9.1CVSS6.6AI score0.0042EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/23 7:9 a.m.4 views

CVE-2024-57548

CMSimple 5.16 allows the user to edit log.php file via print page...

9.1CVSS6.9AI score0.0042EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 11:31 p.m.6 views

CVE-2007-6460

Multiple cross-site scripting XSS vulnerabilities in Anon Proxy Server before 0.101 allow remote attackers to inject arbitrary web script or HTML via the URI, which is later displayed by 1 log.php or 2 logerror.php, a different vulnerability than CVE-2007-6459...

6.8CVSS5.9AI score0.05296EPSS
Exploits2References1
CNVD
CNVD
added 2025/02/18 12:0 a.m.1 views

Unspecified Vulnerability in CMSimple (CNVD-2026-00537)

CMSimple is a free content management system. An unspecified vulnerability exists in CMSimple, which can be exploited by an attacker to edit the log.php file via the print page...

9.1CVSS6.7AI score0.0042EPSS
Exploits1References1
NVD
NVD
added 2025/01/27 11:15 p.m.12 views

CVE-2024-57548

CMSimple 5.16 allows the user to edit log.php file via print page...

9.1CVSS0.0042EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/01/27 12:0 a.m.1 views

CMSimple 安全漏洞

CMSimple is a free content management system from CMSimple open source. A security vulnerability exists in CMSimple version 5.16 that originates from allowing a user to edit the log.php file via the print page...

9.1CVSS6.7AI score0.0042EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/01/27 12:0 a.m.7 views

CVE-2024-57548

CMSimple 5.16 allows the user to edit log.php file via print page...

0.0042EPSS
Exploits1References2
NVD
NVD
added 2023/10/03 3:15 p.m.9 views

CVE-2023-4882

DOS vulnerability that could allow an attacker to register a new VNF Virtual Network Function value. This action could trigger the argsassets function defined in the arg-log.php file, which would then execute the args-abort.c file, causing the service to crash...

7.5CVSS7.5AI score0.00069EPSS
Exploits0References1
Prion
Prion
added 2023/10/03 3:15 p.m.19 views

Code injection

DOS vulnerability that could allow an attacker to register a new VNF Virtual Network Function value. This action could trigger the argsassets function defined in the arg-log.php file, which would then execute the args-abort.c file, causing the service to crash...

5CVSS7.5AI score0.00069EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder