Lucene search
+L

4 matches found

NVD
NVD
•added 2019/09/13 1:15 p.m.•34 views

CVE-2019-13363

admin.php?page=notificationbymail in Piwigo 2.9.5 has XSS via the nbmsendhtmlmail, nbmsendmailas, nbmsenddetailedcontent, nbmcomplementarymailcontent, nbmsendrecentpostdates, or paramsubmit parameter. This is exploitable via CSRF...

9.6CVSS8.9AI score0.01355EPSS
SaveExploits4References5
Prion
Prion
•added 2019/09/13 1:15 p.m.•27 views

Cross site request forgery (csrf)

admin.php?page=notificationbymail in Piwigo 2.9.5 has XSS via the nbmsendhtmlmail, nbmsendmailas, nbmsenddetailedcontent, nbmcomplementarymailcontent, nbmsendrecentpostdates, or paramsubmit parameter. This is exploitable via CSRF...

6.8CVSS8.7AI score0.01355EPSS
SaveExploits4References5Affected Software1
Mend
Mend
•added 2019/09/13 12:22 p.m.•3 views

CVE-2019-13363

admin.php?page=notificationbymail in Piwigo 2.9.5 has XSS via the nbmsendhtmlmail, nbmsendmailas, nbmsenddetailedcontent, nbmcomplementarymailcontent, nbmsendrecentpostdates, or paramsubmit parameter. This is exploitable via CSRF...

9.6CVSS0.01355EPSS
SaveExploits4References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/13 12:00 a.m.•8 views

CVE-2019-13363: Improper Neutralization of Input During Web Page Generation

admin.php?page=notificationbymail in Piwigo 2.9.5 has XSS via the nbmsendhtmlmail, nbmsendmailas, nbmsenddetailedcontent, nbmcomplementarymailcontent, nbmsendrecentpostdates, or paramsubmit parameter. This is exploitable via CSRF...

9.6CVSS8.1AI score0.01355EPSS
SaveExploits4References3
Rows per page
Query Builder