Lucene search
K

6 matches found

CNVD
CNVD
added 2021/10/08 12:0 a.m.15 views

Spotweb Cross-Site Scripting Vulnerability

Spotweb is a Php-based Soptnet client that follows the Spotnet protocol from the Spotweb team.A cross-site scripting vulnerability exists in Spotweb 1.5.1 and below, which can be exploited by remote attackers to inject arbitrary Web scripts or HTML via the newpassword2 parameter...

4.3CVSS4AI score0.01305EPSS
Exploits1Affected Software1
NVD
NVD
added 2021/10/01 4:15 p.m.10 views

CVE-2021-40968

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter...

6.1CVSS0.01305EPSS
Exploits1References2
Prion
Prion
added 2021/10/01 4:15 p.m.10 views

Cross site scripting

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter...

4.3CVSS6AI score0.01305EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/10/01 3:42 p.m.16 views

CVE-2021-40968

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter...

6.2AI score0.01305EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2021/10/01 3:42 p.m.14 views

CVE-2021-40968

Removed by vendor...

6.1CVSS6.3AI score0.01305EPSS
Exploits1
CNNVD
CNNVD
added 2021/10/01 12:0 a.m.3 views

spotweb 跨站脚本漏洞

Spotweb is a Php-based Soptnet client that follows the Spotnet protocol from the Spotweb team.A cross-site scripting vulnerability exists in Spotweb 1.5.1 and below, which can be exploited by remote attackers to inject arbitrary Web scripts or HTML via the newpassword2 parameter...

6.1CVSS5.5AI score0.01305EPSS
Exploits1References1
Rows per page
Query Builder