Lucene search
K

23 matches found

NVD
NVD
added 2026/02/06 5:16 p.m.2 views

CVE-2019-25301

Millhouse-Project 1.414 contains a persistent cross-site scripting vulnerability in the comment submission functionality that allows attackers to inject malicious scripts. Attackers can post comments with embedded JavaScript through the 'content' parameter in addcommentsql.php to execute arbitrar...

6.4CVSS0.00059EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/02/06 4:41 p.m.1 views

CVE-2019-25301 thrsrossi Millhouse-Project 1.414 - 'content' Persistent Cross-Site Scripting

Millhouse-Project 1.414 contains a persistent cross-site scripting vulnerability in the comment submission functionality that allows attackers to inject malicious scripts. Attackers can post comments with embedded JavaScript through the 'content' parameter in addcommentsql.php to execute arbitrar...

6.4CVSS5.4AI score0.00059EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/02/06 4:41 p.m.27 views

CVE-2019-25301 thrsrossi Millhouse-Project 1.414 - 'content' Persistent Cross-Site Scripting

Millhouse-Project 1.414 contains a persistent cross-site scripting vulnerability in the comment submission functionality that allows attackers to inject malicious scripts. Attackers can post comments with embedded JavaScript through the 'content' parameter in addcommentsql.php to execute arbitrar...

6.4CVSS0.00059EPSS
Exploits0References3
EUVD
EUVD
added 2026/02/06 4:41 p.m.3 views

EUVD-2019-19399

Millhouse-Project 1.414 contains a persistent cross-site scripting vulnerability in the comment submission functionality that allows attackers to inject malicious scripts. Attackers can post comments with embedded JavaScript through the 'content' parameter in addcommentsql.php to execute arbitrar...

6.4CVSS5.4AI score0.00059EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/02/06 12:0 a.m.3 views

Millhouse-Project 跨站脚本漏洞

Millhouse-Project is a blog page developed by Thérèse Scott Rossi as an individual project. Version 1.414 of Millhouse-Project has a cross-site scripting vulnerability. This vulnerability stems from a storage-based cross-site scripting feature in the comment submission function, which may allow...

6.4CVSS5.9AI score0.00059EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-41085

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.0228EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:3 a.m.3 views

CVE-2023-37165

Millhouse-Project v1.414 was discovered to contain a remote code execution RCE vulnerability via the component /addpostsql.php...

9.8CVSS8.4AI score0.0228EPSS
Exploits1
NVD
NVD
added 2023/07/20 7:15 p.m.7 views

CVE-2023-37165

Millhouse-Project v1.414 was discovered to contain a remote code execution RCE vulnerability via the component /addpostsql.php...

9.8CVSS9.9AI score0.0228EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2023/07/20 7:15 p.m.0 views

CVE-2023-37165

Millhouse-Project v1.414 was discovered to contain a remote code execution RCE vulnerability via the component /addpostsql.php...

9.8CVSS8AI score0.0228EPSS
Exploits1References2
OSV
OSV
added 2023/07/20 7:15 p.m.0 views

CVE-2023-37165

Millhouse-Project v1.414 was discovered to contain a remote code execution RCE vulnerability via the component /addpostsql.php...

9.8CVSS6.3AI score
Exploits0References1
Prion
Prion
added 2023/07/20 7:15 p.m.7 views

Remote code execution

Millhouse-Project v1.414 was discovered to contain a remote code execution RCE vulnerability via the component /addpostsql.php...

7.5CVSS9.8AI score0.0228EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2023/07/20 12:0 a.m.0 views

Millhouse-Project SQL注入漏洞

Millhouse-Project is a blog page for the individual developer Thérèse Scott Rossi. A security vulnerability exists in Millhouse-Project version 1.414, which stems from a Remote Code Execution RCE vulnerability in component/addpostsql.php...

9.8CVSS8.6AI score0.0228EPSS
Exploits1References2
CVE
CVE
added 2023/07/20 12:0 a.m.39 views

CVE-2023-37165

CVE-2023-37165 affects Millhouse-Project v1.414 with a remote code execution (RCE) via the /add_post_sql.php component. The CVSS v3.1 base score is 9.8 (CRITICAL) with network attack vector, low complexity, no privileges required, and high impact to confidentiality, integrity, and availability. M...

9.8CVSS9.8AI score0.0228EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/07/20 12:0 a.m.3 views

PT-2023-25814 · Unknown · Millhouse-Project

Name of the Vulnerable Software and Affected Versions: Millhouse-Project version 1.414 Description: A remote code execution issue was found in the component /add post sql.php, allowing for potential code execution. Recommendations: For Millhouse-Project version 1.414, consider restricting access ...

9.8CVSS9.7AI score0.0228EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/07/20 12:0 a.m.15 views

CVE-2023-37165

Millhouse-Project v1.414 was discovered to contain a remote code execution RCE vulnerability via the component /addpostsql.php...

10AI score0.0228EPSS
Exploits1References1
Packet Storm
Packet Storm
added 2023/05/24 12:0 a.m.299 views

thrsrossi Millhouse-Project 1.414 Shell Upload

sdsdsds ------WebKitFormBoundaryzlHN0BEvvaJsDgh8 Content-Disposition: form-data; name="files"; filename="" Content-Type: application/octet-stream ------WebKitFormBoundaryzlHN0BEvvaJsDgh8 Content-Disposition: form-data; name="category" 1 ------WebKitFormBoundaryzlHN0BEvvaJsDgh8 Content-Disposition...

7.1AI score
Exploits0
0day.today
0day.today
added 2023/05/23 12:0 a.m.195 views

Millhouse Project 1.414 thrsrossi - Remote Code Execution Exploit

sdsdsds ------WebKitFormBoundaryzlHN0BEvvaJsDgh8 Content-Disposition: form-data; name="files"; filename="" Content-Type: application/octet-stream ------WebKitFormBoundaryzlHN0BEvvaJsDgh8 Content-Disposition: form-data; name="category" 1 ------WebKitFormBoundaryzlHN0BEvvaJsDgh8 Content-Disposition...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2023/05/23 12:0 a.m.250 views

thrsrossi Millhouse-Project 1.414 - Remote Code Execution

sdsdsds ------WebKitFormBoundaryzlHN0BEvvaJsDgh8 Content-Disposition: form-data; name="files"; filename="" Content-Type: application/octet-stream ------WebKitFormBoundaryzlHN0BEvvaJsDgh8 Content-Disposition: form-data; name="category" 1 ------WebKitFormBoundaryzlHN0BEvvaJsDgh8 Content-Disposition...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2023/05/12 12:0 a.m.342 views

Millhouse-Project 1.414 Shell Upload

sdsdsds ------WebKitFormBoundaryzlHN0BEvvaJsDgh8 Content-Disposition: form-data; name="files"; filename="" Content-Type: application/octet-stream ------WebKitFormBoundaryzlHN0BEvvaJsDgh8 Content-Disposition: form-data; name="category" 1 ------WebKitFormBoundaryzlHN0BEvvaJsDgh8 Content-Disposition...

7.1AI score
Exploits0
0day.today
0day.today
added 2019/11/06 12:0 a.m.55 views

thrsrossi Millhouse-Project 1.414 - (content) Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: thrsrossi Millhouse-Project 1.414 - 'content' Persistent Cross-Site Scripting Exploit Author: Cakes Vendor Homepage: https://github.com/thrsrossi/Millhouse-Project Software Link: https://github.com/thrsrossi/Millhouse-Project.gi...

7.4AI score
Exploits0
Rows per page
Query Builder