Lucene search
K

6 matches found

NVD
NVD
added 2023/12/11 9:15 p.m.9 views

CVE-2023-49488

A cross-site scripting XSS vulnerability in Openfiler ESA v2.99.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the nic parameter...

6.1CVSS0.00105EPSS
Exploits1References1
OSV
OSV
added 2023/12/11 9:15 p.m.1 views

CVE-2023-49488

A cross-site scripting XSS vulnerability in Openfiler ESA v2.99.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the nic parameter...

6.1CVSS5.9AI score0.00105EPSS
Exploits1References1
Prion
Prion
added 2023/12/11 9:15 p.m.9 views

Cross site scripting

A cross-site scripting XSS vulnerability in Openfiler ESA v2.99.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the nic parameter...

5.8CVSS6AI score0.00105EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2023/12/11 12:0 a.m.1 views

Openfiler Security Vulnerability

Openfiler is provides an easy way to deploy and manage networked storage. A security vulnerability exists in Openfiler ESA version v2.99.1. An attacker can exploit this vulnerability to execute arbitrary web script or HTML by injecting a specially crafted payload into the nic parameter...

6.1CVSS6.8AI score0.00105EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/08/21 12:0 a.m.1 views

Hospital Management System SQL注入漏洞

The Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. An SQL injection vulnerability exists in Free Hospital Management System for Small Practices version 1.0, which stems from the fac...

9.8CVSS7.1AI score0.00066EPSS
Exploits0References4
Zero Day Initiative
Zero Day Initiative
added 2017/03/30 12:0 a.m.29 views

Trend Micro InterScan Web Security Virtual Appliance ManageIPConfig setMgmtIPConfig Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro InterScan Web Security Virtual Appliance. Authentication is required to exploit this vulnerability. The specific flaw exists within ManageIPConfig's setDataIPConfig method. A crafted NI...

9CVSS5.3AI score
Exploits0References1
Rows per page
Query Builder