Lucene search
+L

10 matches found

CNVD
CNVD
•added 2021/10/08 12:00 a.m.•99 views

Spotweb Cross-Site Scripting Vulnerability

Spotweb is a Php-based Soptnet client that follows the Spotnet protocol from the Spotweb team.A cross-site scripting vulnerability exists in Spotweb 1.5.1 and below, which can be exploited by remote attackers to inject arbitrary Web scripts or HTML via the newpassword2 parameter...

4.3CVSS4AI score0.02239EPSS
SaveExploits1Affected Software1
NVD
NVD
•added 2021/10/01 4:15 p.m.•24 views

CVE-2021-40968

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter...

6.1CVSS0.02239EPSS
SaveExploits1References2
Prion
Prion
•added 2021/10/01 4:15 p.m.•18 views

Cross site scripting

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter...

4.3CVSS6AI score0.02239EPSS
SaveExploits1References2Affected Software1
attackerkb
attackerkb
•added 2021/10/01 4:15 p.m.•11 views

CVE-2021-40968

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter...

6.1CVSS6.6AI score0.02239EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2021/10/01 3:42 p.m.•34 views

CVE-2021-40968

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter...

6.2AI score0.02239EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2021/10/01 3:42 p.m.•71 views

CVE-2021-40968

Removed by vendor...

6.1CVSS6.3AI score0.02239EPSS
SaveExploits1
Mend
Mend
•added 2021/10/01 3:42 p.m.•2 views

CVE-2021-40968

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter...

6.1CVSS0.02239EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/01 12:00 a.m.•5 views

CVE-2021-40968: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter...

6.1CVSS6AI score0.02239EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/10/01 12:00 a.m.•1 views

PT-2021-23022

Name of the Vulnerable Software and Affected Versions spotweb versions 1.5.1 and below Description The issue allows remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter in the templates/installer/step-004.inc.php file. This enables cross-site scripting XSS attack...

6.1CVSS0.02239EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2021/10/01 12:00 a.m.•21 views

spotweb 跨站脚本漏洞

Spotweb is a Php-based Soptnet client that follows the Spotnet protocol from the Spotweb team.A cross-site scripting vulnerability exists in Spotweb 1.5.1 and below, which can be exploited by remote attackers to inject arbitrary Web scripts or HTML via the newpassword2 parameter...

6.1CVSS5.5AI score0.02239EPSS
SaveExploits1References1
Rows per page
Query Builder