Lucene search
+L

6 matches found

Openbugbounty
Openbugbounty
•added 2017/08/05 12:39 a.m.•19 views

albeon.ru XSS vulnerability

Vulnerable URL: https://albeon.ru:8445/inc/lostpwd.php Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 21:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5838327 VIP website status:| No Check albeon.ru SSL...

6.3AI score
SaveExploits0
Cvelist
Cvelist
•added 2007/10/23 9:00 p.m.•35 views

CVE-2007-5649

Cross-site scripting XSS vulnerability in lostpwd.php in Creative Digital Resources SocketMail 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the lostid parameter...

5.7AI score0.01521EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/10/23 12:00 a.m.•3 views

CVE-2007-5649: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in lostpwd.php in Creative Digital Resources SocketMail 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the lostid parameter...

4.3CVSS6AI score0.01521EPSS
SaveExploits2References2
exploitpack
exploitpack
•added 2007/10/19 12:00 a.m.•15 views

Socketmail 2.2.1 - lostpwd.php Cross-Site Scripting

Socketmail 2.2.1 - lostpwd.php Cross-Site Scripting source: https://www.securityfocus.com/bid/26138/info SocketMail is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/10/14 12:00 a.m.•3 views

CVE-2005-3236: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Cyphor 0.19 allow remote attackers to execute arbitrary SQL and obtain administrative access via 1 the fid parameter of newmsg.php, which can enable XSS attacks when the SQL syntax is invalid or 2 the nick parameter of lostpwd.php...

6.8CVSS6.4AI score0.03688EPSS
SaveExploits2References1
exploitpack
exploitpack
•added 2005/10/08 12:00 a.m.•29 views

Cyphor 0.19 - lostpwd.php?nick SQL Injection

Cyphor 0.19 - lostpwd.php?nick SQL Injection source: https://www.securityfocus.com/bid/15047/info Cyphor is prone to multiple cross-site scripting and SQL injection vulnerabilities. Exploitation could allow for theft of cookie-based authentication credentials or unauthorized access to database...

0.3AI score
SaveExploits0
Rows per page
Query Builder