2 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in CruxSoftware CruxPA 2.00, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 txtusername parameter to login.php, 2 todo parameter to newtodo.php, and unspecified vectors to 3 newtelephone.php and 4...
4.3CVSS6.2AI score0.01344EPSS
SaveExploits1References8Affected Software1
CVE-2010-2718: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in CruxSoftware CruxPA 2.00, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 txtusername parameter to login.php, 2 todo parameter to newtodo.php, and unspecified vectors to 3 newtelephone.php and 4...
4.3CVSS5.9AI score0.01344EPSS
SaveExploits1References2
20