Lucene search
K

18 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-15945

Malware in sbrugna...

5.4CVSS5.4AI score0.00528EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-15016

Malware in sbrugna...

4.8CVSS5AI score0.00622EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/22 4:57 p.m.5 views

CVE-2020-22251

Cross Site Scripting XSS vulnerability in phpList 3.5.3 via the login name field in Manage Administrators when adding a new admin...

4.8CVSS5.9AI score0.00622EPSS
Exploits1
Citrix
Citrix
added 2024/07/14 12:0 a.m.5 views

Citrix DAAS Console

Introduction This article is a summary of the top support articles related to Citrix Daas web consoles: Web Studio and Monitor. Top Knowledge Content Director CTX257614 - How to create a detailed custom report from the Cloud Hosted Director Monitor Web Studio CTX477615 - Studio Console Shows...

7AI score
Exploits0
OSV
OSV
added 2024/03/06 11:4 a.m.18 views

BIT-PHPLIST-2020-22251

Cross Site Scripting XSS vulnerability in phpList 3.5.3 via the login name field in Manage Administrators when adding a new admin...

4.8CVSS4.8AI score0.00622EPSS
Exploits1References1
OSV
OSV
added 2024/03/06 11:3 a.m.12 views

BIT-PHPLIST-2020-23192

A stored cross site scripting XSS vulnerability in phplist 3.5.4 and below allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload in the "admin" parameter under the "Manage administrators" module...

5.4CVSS5.5AI score0.00528EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2021/09/08 12:0 a.m.3 views

The vulnerability of the phpList mailing list management software lies in the lack of security measures for website structures, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the phpList mailing list management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by creating a new username in the “Login Name” field of the...

4.9CVSS5.3AI score0.00622EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2021/07/06 8:15 p.m.15 views

CVE-2020-22251

Cross Site Scripting XSS vulnerability in phpList 3.5.3 via the login name field in Manage Administrators when adding a new admin...

4.8CVSS5.9AI score
Exploits0References1
Prion
Prion
added 2021/07/06 8:15 p.m.9 views

Cross site scripting

Cross Site Scripting XSS vulnerability in phpList 3.5.3 via the login name field in Manage Administrators when adding a new admin...

3.5CVSS4.9AI score0.00622EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2021/07/06 7:20 p.m.55 views

CVE-2020-22251

CVE-2020-22251 is a Cross Site Scripting (XSS) vulnerability in phpList 3.5.3 exploitable via the login name field when adding a new administrator in Manage Administrators. Multiple connected sources corroborate the issue, describing an XSS condition arising from insufficient input handling on th...

4.8CVSS4.9AI score0.00622EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/07/06 7:20 p.m.10 views

CVE-2020-22251

Cross Site Scripting XSS vulnerability in phpList 3.5.3 via the login name field in Manage Administrators when adding a new admin...

4.9AI score0.00622EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/07/06 12:0 a.m.2 views

PhpList 跨站脚本漏洞

phpList is an open source newsletter and email marketing software from phpList UK. A cross-site scripting vulnerability exists in phpList version 3.5.3, which can be exploited by adding a new administrator with the login field in the "Manage Administrators" section...

4.8CVSS5.2AI score0.00622EPSS
Exploits1References2
CNVD
CNVD
added 2021/07/05 12:0 a.m.8 views

phplist cross-site scripting vulnerability (CNVD-2021-48517)

phpList is an open source newsletter and email marketing software from phpList UK. A stored cross-site scripting vulnerability exists in phplist 3.5.4 and earlier versions, which can be exploited to execute arbitrary Web script or HTML via the "admin" parameter under the "Manage Administrators"...

5.4CVSS6.1AI score0.00528EPSS
Exploits1References1
OSV
OSV
added 2021/07/02 6:15 p.m.13 views

CVE-2020-23192

A stored cross site scripting XSS vulnerability in phplist 3.5.4 and below allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload in the "admin" parameter under the "Manage administrators" module...

5.4CVSS5.4AI score
Exploits0References1
Prion
Prion
added 2021/07/02 6:15 p.m.11 views

Cross site scripting

A stored cross site scripting XSS vulnerability in phplist 3.5.4 and below allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload in the "admin" parameter under the "Manage administrators" module...

3.5CVSS5.3AI score0.00528EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2021/07/02 5:51 p.m.49 views

CVE-2020-23192

CVE-2020-23192 is a stored XSS in phplist ≤ 3.5.4, exploitable by an authenticated user via a crafted payload in the admin parameter of the Manage Administrators module. The vulnerability can lead to execution of arbitrary web scripts/HTML. Public technical details are provided by multiple source...

5.4CVSS5.5AI score0.00528EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2021/07/02 12:0 a.m.1 views

PhpList 跨站脚本漏洞

phpList is an open source newsletter and email marketing software from phpList UK. A stored cross-site scripting vulnerability exists in phplist 3.5.4 and earlier versions, which can be exploited to execute arbitrary Web script or HTML via the "admin" parameter under the "Manage Administrators"...

5.4CVSS5.5AI score0.00528EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2020/05/18 12:0 a.m.2 views

PT-2020-6385 · Phplist · Phplist

Name of the Vulnerable Software and Affected Versions: phplist version 3.5.3 Description: The issue is related to a lack of protection for the web page structure, allowing a remote attacker to perform cross-site scripting attacks. This can be achieved by creating a new username in the login name...

4.9CVSS4.9AI score0.00622EPSS
Exploits1References7
Rows per page
Query Builder