Lucene search
+L

27 matches found

OSV
OSV
•added 2023/09/20 12:00 a.m.•28 views

CVE-2023-40618

A reflected cross-site scripting XSS vulnerability in OpenKnowledgeMaps Head Start versions 4, 5, 6, 7 as well as Visual Project Explorer 1.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'service' parameter in...

6.2AI score
SaveExploits0References3
NVD
NVD
•added 2023/09/13 10:15 p.m.•41 views

CVE-2023-40617

A reflected cross-site scripting XSS vulnerability in OpenKnowledgeMaps Head Start 7 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'file' parameter in 'displayPDF.php'...

6.1CVSS6.1AI score0.00568EPSS
SaveExploits0References1
Prion
Prion
•added 2023/09/13 10:15 p.m.•31 views

Cross site scripting

A reflected cross-site scripting XSS vulnerability in OpenKnowledgeMaps Head Start 7 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'file' parameter in 'displayPDF.php'...

5.8CVSS6.1AI score0.00568EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2023/09/13 12:00 a.m.•25 views

CVE-2023-40617

A reflected cross-site scripting XSS vulnerability in OpenKnowledgeMaps Head Start 7 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'file' parameter in 'displayPDF.php'...

6.2AI score
SaveExploits0References3
CVE
CVE
•added 2023/09/13 12:00 a.m.•60 views

CVE-2023-40617

CVE-2023-40617 affects OpenKnowledgeMaps Head Start 7. The vulnerability is a reflected cross-site scripting (XSS) in which an attacker can cause a user’s browser to execute arbitrary JavaScript by injecting a malicious payload into the file parameter of the displayPDF.php endpoint. Impact is lim...

6.1CVSS6AI score0.00568EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/13 12:00 a.m.•18 views

CVE-2023-40617

A reflected cross-site scripting XSS vulnerability in OpenKnowledgeMaps Head Start 7 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'file' parameter in 'displayPDF.php'...

6.1AI score0.00568EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/13 12:00 a.m.•4 views

CVE-2023-40617: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in OpenKnowledgeMaps Head Start 7 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'file' parameter in 'displayPDF.php'...

6.1CVSS6.6AI score0.00568EPSS
SaveExploits0References2
Rows per page
Query Builder