Lucene search
+L

7991 matches found

Prion
Prion
added 2020/05/07 5:15 p.m.19 views

Cross site scripting

Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting XSS attacks via the self-registration feature...

4.3CVSS5.9AI score0.01141EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2020/05/07 5:15 p.m.18 views

Cross site scripting

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted test...

3.5CVSS5.1AI score0.00666EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2020/05/07 5:15 p.m.3 views

CVE-2020-5747

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted test...

5.4CVSS5.2AI score0.00666EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2020/05/07 5:15 p.m.4 views

CVE-2020-5748

Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting XSS attacks via the self-registration feature...

6.1CVSS5.8AI score0.01132EPSS
SaveExploits1References2
Prion
Prion
added 2020/05/07 5:15 p.m.19 views

Cross site scripting

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted operator...

3.5CVSS5.1AI score0.00666EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2020/05/07 5:15 p.m.15 views

Cross site scripting

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted test...

3.5CVSS5.1AI score0.00666EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2020/05/07 5:15 p.m.4 views

CVE-2020-5749

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted group...

5.4CVSS5.2AI score0.00666EPSS
SaveExploits1References2
Prion
Prion
added 2020/05/07 5:15 p.m.17 views

Cross site scripting

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted group...

3.5CVSS5.1AI score0.00666EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2020/05/07 5:15 p.m.5 views

CVE-2020-5746

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted test...

5.4CVSS5.2AI score0.00666EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2020/05/07 4:16 p.m.28 views

CVE-2020-5750

Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting XSS attacks via the self-registration feature...

6AI score0.01141EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2020/05/07 4:15 p.m.28 views

CVE-2020-5749

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted group...

5.1AI score0.00666EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2020/05/07 4:13 p.m.23 views

CVE-2020-5751

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted operator...

5.1AI score0.00666EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2020/05/07 4:12 p.m.26 views

CVE-2020-5748

Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting XSS attacks via the self-registration feature...

6AI score0.01132EPSS
SaveExploits1References1
CVE
CVE
added 2020/05/07 4:12 p.m.57 views

CVE-2020-5748

CVE-2020-5748 affects Tecnick.com TCExam, specifically version 14.2.2, with a vulnerability in the self-registration flow due to insufficient output sanitization that enables a remote, unauthenticated attacker to perform persistent cross-site scripting (XSS). The connected sources corroborate a c...

6.1CVSS5.9AI score0.01132EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2020/05/07 4:02 p.m.50 views

CVE-2020-5747

TCExam 14.2.2 contains a cross-site scripting (XSS) vulnerability due to insufficient output sanitization. A remote, authenticated attacker can create a crafted test to persist XSS. No patch/firmware version or remediation is detailed in the provided documents.

5.4CVSS5AI score0.00666EPSS
SaveExploits1References1Affected Software1
zdt
zdt
added 2020/05/07 12:00 a.m.68 views

Online Clothing Store 1.0 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Online Clothing Store 1.0 - Persistent Cross-Site Scripting Exploit Author: Sushant Kamble Vendor Homepage: https://www.sourcecodester.com/php/14185/online-clothing-store.html Software Link:...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2020/05/07 12:00 a.m.130 views

Draytek VigorAP Cross Site Scripting

Document Title: =============== Draytek VigorAP - RADIUS Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2244 Release Date: ============= 2020-05-07 Vulnerability Laboratory ID VL-ID: ==================================== 224...

SaveExploits0
Vulnerability Lab
Vulnerability Lab
added 2020/05/07 12:00 a.m.53 views

Sellacious eCommerce - Multiple Persistent Vulnerabilities

Document Title: =============== Sellacious eCommerce - Multiple Persistent Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2226 Release Date: ============= 2020-05-07 Vulnerability Laboratory ID VL-ID: ===================================...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2020/05/07 12:00 a.m.133 views

Sentrifugo CMS 3.2 Cross Site Scripting

Document Title: =============== Sentrifugo v3.2 CMS - Persistent XSS Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2229 Release Date: ============= 2020-05-05 Vulnerability Laboratory ID VL-ID: ==================================== 22...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2020/05/07 12:00 a.m.137 views

OpenZ ERP 3.6.60 Cross Site Scripting

Document Title: =============== OpenZ v3.6.60 ERP - Employee Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2234 Release Date: ============= 2020-05-06 Vulnerability Laboratory ID VL-ID: ====================================...

SaveExploits0
Rows per page
Query Builder