Lucene search
+L

3 matches found

seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•19 views

Logaholic profiles.php newconfname Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/27003/info Logaholic is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues, a cross-site scripting issue, and an HTML-injection issue. The issues occur because the application fail...

7.1AI score
SaveExploits0
Cvelist
Cvelist
•added 2007/12/28 12:00 a.m.•42 views

CVE-2007-6560

Multiple cross-site scripting XSS vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to inject arbitrary web script or HTML via 1 the newconfname parameter to profiles.php or 2 the conf parameter to index.php...

5.8AI score0.01962EPSS
SaveExploits3References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/12/28 12:00 a.m.•4 views

CVE-2007-6560: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to inject arbitrary web script or HTML via 1 the newconfname parameter to profiles.php or 2 the conf parameter to index.php...

4.3CVSS5.9AI score0.01962EPSS
SaveExploits3References2
Rows per page
Query Builder