CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

NVD•added 2018/10/29 12:29 p.m.•33 views

CVE-2018-18782

Reflected XSS exists in DedeCMS 5.7 SP2 via the /member/myfriend.php ftype parameter...

6.1CVSS6AI score0.00826EPSS

SaveExploits1References1

Prion•added 2018/10/29 12:29 p.m.•31 views

Cross site scripting

Reflected XSS exists in DedeCMS 5.7 SP2 via the /member/myfriend.php ftype parameter...

4.3CVSS6AI score0.00826EPSS

SaveExploits1References1Affected Software1

Cvelist•added 2018/10/29 5:00 a.m.•38 views

CVE-2018-18782

Reflected XSS exists in DedeCMS 5.7 SP2 via the /member/myfriend.php ftype parameter...

6AI score0.00826EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2018/10/29 12:00 a.m.•8 views

CVE-2018-18782: Improper Neutralization of Input During Web Page Generation

Reflected XSS exists in DedeCMS 5.7 SP2 via the /member/myfriend.php ftype parameter...

6.1CVSS6.3AI score0.00826EPSS

SaveExploits1References2

Positive Technologies•added 2018/10/29 12:00 a.m.•5 views

PT-2018-14646

Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7 SP2 Description A reflected XSS issue exists due to the "ftype" parameter in the "/member/myfriend.php" API endpoint. Recommendations For DedeCMS version 5.7 SP2, consider restricting access to the "/member/myfriend.php"...

6.1CVSS0.00826EPSS

SaveExploits1References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by