Lucene search
+L

3 matches found

OSV
OSV
•added 2022/05/14 2:08 a.m.•45 views

GHSA-WM9C-VCV2-VPQC phpMyAdmin full path disclosure vulnerability

phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to obtain sensitive information via vectors involving 1 an array value to FormDisplay.php, 2 incorrect data to validate.php, 3 unexpected data to Validator.php, 4 a missing config directory...

5.3CVSS6.7AI score0.02616EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2019/11/21 12:00 a.m.•6 views

PT-2019-7176

Name of the Vulnerable Software and Affected Versions ikiwiki versions prior to 3.20150329 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the openid identifier parameter in a verify action to "ikiwiki.cgi...

6.1CVSS0.01688EPSS
SaveExploits1References14
CNVD
CNVD
•added 2015/07/02 12:00 a.m.•14 views

Ikiwiki 'openid_identifier' parameter cross-site scripting vulnerability

Ikiwiki is a wiki compiler that supports the conversion of wiki pages into HTML pages for web publishing. Ikiwiki handles a cross-site scripting vulnerability in the 'openididentifier' parameter, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code,...

6.1CVSS6.2AI score0.01688EPSS
SaveExploits1References1
Rows per page
Query Builder