Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/10/29 3:18 p.m.2 views

CVE-2025-34307

IPFire versions prior to 2.29 Core Update 198 contain a stored cross-site scripting XSS vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the pienumber parameter when updating the firewall country search defaults. When a user updates the default value...

5.4CVSS5.9AI score0.00024EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/28 12:0 a.m.2 views

IPFire 安全漏洞

IPFire is an open source Linux distribution from the IPFire organization, used primarily as a router and firewall. IPFire suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the REMOTELOGADDR parameter of the...

5.4CVSS6AI score0.00024EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/08/26 12:0 a.m.1 views

IPFire 安全漏洞

IPFire is an open source Linux distribution from the IPFire organization. It is primarily used as a router and firewall. A security vulnerability exists in IPFire version 2.29, which stems from logs.cgi not being cleaned of user input and could lead to the execution of arbitrary OS commands...

6.5CVSS6.9AI score0.00113EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/21 6:31 p.m.5 views

CVE-2006-7189

Cross-site scripting XSS vulnerability in cgi-bin/admin/logs.cgi in web-app.net WebAPP before 20060403 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the Statistics Log Viewer...

4.3CVSS5.9AI score0.00297EPSS
Exploits0References1
Packet Storm
Packet Storm
added 2014/12/22 12:0 a.m.29 views

SmoothWall 3.1 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: SmoothWall 3.1 Multiple vulnerabilities Date: 21/12/2014 Author: Yann CAM @ Synetis Vendor or Software Link: www.smoothwall.org - www.smoothwall.org/download/ Version: 3.1 Category: CSRF password reset & XSS persistent Google dork: Tested on: Smoothwall Linux distribution Smoothwal...

0.2AI score
Exploits0
CVE
CVE
added 2007/04/03 12:0 a.m.46 views

CVE-2006-7189

CVE-2006-7189 describes a cross-site scripting (XSS) vulnerability in the web-app.net WebAPP product, specifically in the shell path CGI-bin/admin/logs.cgi, prior to version 20060403. The flaw allows remote attackers to inject arbitrary web script or HTML through unspecified vectors related to th...

4.3CVSS5.7AI score0.00297EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder