Lucene search
+L

10 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/06/27 12:00 a.m.•3 views

CVE-2006-3257: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.7.7 allow remote attackers to inject arbitrary HTML or web script via unspecified attack vectors, possibly including 1 calendar/myagenda.php, 2 document/document.php, 3 phpbb/newtopic.php, 4 tracking/userLog.php, and 5 wiki/page.php...

4.3CVSS5.8AI score0.01373EPSS
SaveExploits0References1
Prion
Prion
•added 2006/06/02 1:02 a.m.•25 views

Cross site scripting

Cross-site scripting XSS vulnerability in Chipmunk guestbook allows remote attackers to inject arbitrary web script or HTML via the 1 start parameter in a index.php; 2 forumID parameter in index.php, b newtopic.php, and c reply.php; and 3 ID parameter to d edit.php...

4.3CVSS6.2AI score0.01676EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2006/06/02 1:00 a.m.•37 views

CVE-2006-2757

Cross-site scripting XSS vulnerability in Chipmunk guestbook allows remote attackers to inject arbitrary web script or HTML via the 1 start parameter in a index.php; 2 forumID parameter in index.php, b newtopic.php, and c reply.php; and 3 ID parameter to d edit.php...

5.7AI score0.01676EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/06/02 12:00 a.m.•5 views

CVE-2006-2757: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Chipmunk guestbook allows remote attackers to inject arbitrary web script or HTML via the 1 start parameter in a index.php; 2 forumID parameter in index.php, b newtopic.php, and c reply.php; and 3 ID parameter to d edit.php...

4.3CVSS6AI score0.01676EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/09 12:00 a.m.•3 views

CVE-2005-4135: Undefined Security Weakness

Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the Host header possibly the name parameter or variable, which is then written to data/topics.php...

7.5CVSS6.4AI score0.08619EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/29 12:00 a.m.•5 views

CVE-2005-3871: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Joels Bulletin board JBB 0.9.9rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 nr parameter in topiczeigen.php, 2 forum and 3 zeigeseite parameters in showforum.php, 4 forum parameter in newtopic.php, and 5 tidnr paramete...

7.5CVSS6.4AI score0.01409EPSS
SaveExploits0References1
CVE
CVE
•added 2005/11/06 11:00 a.m.•61 views

CVE-2005-3514

Chipmunk Forum XSS vulnerability CVE-2005-3514 affects the Chipmunk Forum script (Chipmunk Forum

4.3CVSS5.9AI score0.02692EPSS
SaveExploits3References10Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/06 12:00 a.m.•5 views

CVE-2005-3514: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Chipmunk Forum script allow remote attackers to inject arbitrary web script or HTML via the forumID parameter to 1 newtopic.php, 2 quote.php, 3 index.php, and 4 reply.php...

4.3CVSS5.9AI score0.02692EPSS
SaveExploits3References1
Exploit DB
Exploit DB
•added 2005/08/08 12:00 a.m.•27 views

FunkBoard 0.66 - 'newtopic.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/14507/info FunkBoard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...

4.3CVSS5.8AI score0.01569EPSS
SaveExploits6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/06/21 12:00 a.m.•3 views

CVE-2005-2031: Undefined Security Weakness

Multiple SQL injection vulnerabilities in socialMPN allow remote attackers to execute arbitrary SQL commands via 1 the sid parameter to article.php, 2 uname parameter to user.php, 3 siteid parameter to viewforum.php, 4 username parameter to newtopic.php, the 5 secid or 6 artid parameter to...

7.5CVSS6.4AI score0.01204EPSS
SaveExploits1References1
Rows per page
Query Builder