Lucene search
+L

9625 matches found

Packet Storm
Packet Storm
•added 2019/09/26 12:00 a.m.•241 views

Duplicate-Post 3.2.3 Cross Site Scripting

Exploit Title: Duplicate-Post 3.2.3 - Persistent Cross-Site Scripting Google Dork: N/A Date: 2019-06-11 Exploit Author: Unk9vvN Vendor Homepage: https://duplicate-post.lopo.it/ Software Link: https://wordpress.org/plugins/duplicate-post/ Version: 3.2.3 Tested on: Kali Linux CVE: N/A Description...

7AI score
SaveExploits0
exploitpack
exploitpack
•added 2019/09/26 12:00 a.m.•28 views

Duplicate-Post 3.2.3 - Persistent Cross-Site Scripting

Duplicate-Post 3.2.3 - Persistent Cross-Site Scripting Exploit Title: Duplicate-Post 3.2.3 - Persistent Cross-Site Scripting Google Dork: N/A Date: 2019-06-11 Exploit Author: Unk9vvN Vendor Homepage: https://duplicate-post.lopo.it/ Software Link: https://wordpress.org/plugins/duplicate-post/...

6.8AI score
SaveExploits0
zdt
zdt
•added 2019/09/26 12:00 a.m.•44 views

WordPress Duplicate-Post 3.2.3 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Duplicate-Post 3.2.3 - Persistent Cross-Site Scripting Exploit Author: Unk9vvN Vendor Homepage: https://duplicate-post.lopo.it/ Software Link: https://wordpress.org/plugins/duplicate-post/ Version: 3.2.3 Tested on: Kali Linux CV...

SaveExploits0
zdt
zdt
•added 2019/09/25 12:00 a.m.•100 views

Microsoft SharePoint 2013 SP1 - (DestinationFolder) Persistant Cross-Site Scripting Vulnerability

Exploit for asp platform in category web applications Exploit Title: Microsoft SharePoint 2013 SP1 - 'DestinationFolder' Persistent Cross-Site Scripting Author: Davide Cioccia Vendor Homepage: https://www.microsoft.com Software Link:...

3.5CVSS6.3AI score0.02993EPSS
SaveExploits5
Packet Storm
Packet Storm
•added 2019/09/25 12:00 a.m.•166 views

WP Server Log Viewer 1.0 Cross Site Scripting

Exploit Title: WP Server Log Viewer 1.0 - 'logfile' Persistent Cross-Site Scripting Date: 2019-09-10 Exploit Author: strider Software Link: https://github.com/anttiviljami/wp-server-log-viewer Version: 1.0 Tested on: Debian 10 Buster x64 / Kali Linux CVE : None...

0.3AI score
SaveExploits0
exploitpack
exploitpack
•added 2019/09/25 12:00 a.m.•28 views

WP Server Log Viewer 1.0 - logfile Persistent Cross-Site Scripting

WP Server Log Viewer 1.0 - logfile Persistent Cross-Site Scripting Exploit Title: WP Server Log Viewer 1.0 - 'logfile' Persistent Cross-Site Scripting Date: 2019-09-10 Exploit Author: strider Software Link: https://github.com/anttiviljami/wp-server-log-viewer Version: 1.0 Tested on: Debian 10...

SaveExploits0
Exploit DB
Exploit DB
•added 2019/09/25 12:00 a.m.•167 views

WP Server Log Viewer 1.0 - 'logfile' Persistent Cross-Site Scripting

Exploit Title: WP Server Log Viewer 1.0 - 'logfile' Persistent Cross-Site Scripting Date: 2019-09-10 Exploit Author: strider Software Link: https://github.com/anttiviljami/wp-server-log-viewer Version: 1.0 Tested on: Debian 10 Buster x64 / Kali Linux CVE : None...

5.3AI score
SaveExploits0
zdt
zdt
•added 2019/09/23 12:00 a.m.•57 views

GOautodial 4.0 - (CreateEvent) Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: GOautodial 4.0 - 'CreateEvent' Persistent Cross-Site Scripting Author: Cakes Vendor Homepage: https://goautodial.org/ Software Link:...

0.1AI score
SaveExploits0
CVE
CVE
•added 2019/09/20 1:38 p.m.•78 views

CVE-2019-14913

PRiSE adAS 1.7.0 is affected by a persistent XSS in the administration panel due to log data not being properly escaped. Root cause: inadequate escaping in the logging path. Impact: XSS could affect users with access to the admin UI; exact exploit details, affected components, versions beyond 1.7...

5.4CVSS5.2AI score0.00864EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2019/09/20 1:38 p.m.•45 views

CVE-2019-14913

An issue was discovered in PRiSE adAS 1.7.0. Log data are not properly escaped, leading to persistent XSS in the administration panel...

5.3AI score0.00864EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/09/20 12:00 a.m.•15 views

PT-2019-13861

Name of the Vulnerable Software and Affected Versions PRiSE adAS version 1.7.0 Description An issue was discovered where log data are not properly escaped, leading to persistent XSS in the administration panel. Recommendations For PRiSE adAS version 1.7.0, consider updating to a newer version tha...

5.4CVSS0.00864EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/20 12:00 a.m.•10 views

CVE-2019-14913: Improper Neutralization of Input During Web Page Generation

An issue was discovered in PRiSE adAS 1.7.0. Log data are not properly escaped, leading to persistent XSS in the administration panel...

5.4CVSS5.9AI score0.00864EPSS
SaveExploits1References2
exploitpack
exploitpack
•added 2019/09/19 12:00 a.m.•37 views

GOautodial 4.0 - CreateEvent Persistent Cross-Site Scripting

GOautodial 4.0 - CreateEvent Persistent Cross-Site Scripting Exploit Title: GOautodial 4.0 - 'CreateEvent' Persistent Cross-Site Scripting Author: Cakes Discovery Date: 2019-09-19 Vendor Homepage: https://goautodial.org/ Software Link:...

6.8AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2019/09/19 12:00 a.m.•289 views

GOautodial 4.0 - 'CreateEvent' Persistent Cross-Site Scripting

Exploit Title: GOautodial 4.0 - 'CreateEvent' Persistent Cross-Site Scripting Author: Cakes Discovery Date: 2019-09-19 Vendor Homepage: https://goautodial.org/ Software Link: https://downloads2.goautodial.org/centos/7/isos/x8664/GOautodial-4-x8664-Pre-Release-20180929-0618.iso Tested Version: 4.0...

5.3AI score
SaveExploits0
wpexploit
wpexploit
•added 2019/09/16 12:00 a.m.•47 views

InJob < 3.3.8 - Reflected & Persistent XSS

Multiple XSS vulnerabilities have been founded in the 'InJob | Multi-purpose for recruitment WordPress Theme' theme v3.3.6. Edit WPScanTeam: September 16th, 2019 - Envato Contacted September 16th, 2019 - v3.3.7 released. XSS still present October 11th, 2019 - Envato contacted again for updates...

SaveExploits0References1
WPVulnDB
WPVulnDB
•added 2019/09/16 12:00 a.m.•12 views

InJob < 3.3.8 - Reflected & Persistent XSS

Multiple XSS vulnerabilities have been founded in the 'InJob | Multi-purpose for recruitment WordPress Theme' theme v3.3.6. Edit WPScanTeam: September 16th, 2019 - Envato Contacted September 16th, 2019 - v3.3.7 released. XSS still present October 11th, 2019 - Envato contacted again for updates...

6.6AI score
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2019/09/15 10:15 p.m.•23 views

CVE-2019-16333

GetSimple CMS v3.3.15 has Persistent Cross-Site Scripting XSS in admin/theme-edit.php...

5.4CVSS5.9AI score
SaveExploits0References1
NVD
NVD
•added 2019/09/15 10:15 p.m.•26 views

CVE-2019-16334

In Bludit v3.9.2, there is a persistent XSS vulnerability in the Categories - Add New Category - Name field. NOTE: this may overlap CVE-2017-16636...

4.8CVSS5AI score0.00677EPSS
SaveExploits1References1
Prion
Prion
•added 2019/09/15 10:15 p.m.•28 views

Cross site scripting

In Bludit v3.9.2, there is a persistent XSS vulnerability in the Categories - Add New Category - Name field. NOTE: this may overlap CVE-2017-16636...

3.5CVSS5AI score0.00677EPSS
SaveExploits4References1Affected Software1
Prion
Prion
•added 2019/09/15 10:15 p.m.•29 views

Cross site scripting

GetSimple CMS v3.3.15 has Persistent Cross-Site Scripting XSS in admin/theme-edit.php...

3.5CVSS5.2AI score0.00667EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder