CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

osv_cve•added 2019/01/29 6:29 p.m.•34 views

CVE-2019-7172

A stored-self XSS exists in ATutor through v2.2.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Real Name field to /mods/core/users/admins/myedit.php...

6.1CVSS6.1AI score0.00865EPSS

SaveExploits1References1

Prion•added 2019/01/29 6:29 p.m.•23 views

Cross site scripting

A stored-self XSS exists in ATutor through v2.2.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Real Name field to /mods/core/users/admins/myedit.php...

4.3CVSS6AI score0.00865EPSS

SaveExploits1References1Affected Software1

Cvelist•added 2019/01/29 6:00 p.m.•46 views

CVE-2019-7172

A stored-self XSS exists in ATutor through v2.2.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Real Name field to /mods/core/users/admins/myedit.php...

6.3AI score0.00865EPSS

SaveExploits1References1

Mend•added 2019/01/29 6:00 p.m.•13 views

CVE-2019-7172

A stored-self XSS exists in ATutor through v2.2.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Real Name field to /mods/core/users/admins/myedit.php...

6.1CVSS0.00865EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2019/01/29 12:00 a.m.•9 views

CVE-2019-7172: Improper Neutralization of Input During Web Page Generation

A stored-self XSS exists in ATutor through v2.2.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Real Name field to /mods/core/users/admins/myedit.php...

6.1CVSS6AI score0.00865EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by