Lucene search
+L

34 matches found

NVD
NVD
•added 2023/01/13 6:15 p.m.•26 views

CVE-2009-10002

A vulnerability, which was classified as problematic, has been found in dpup fittr-flickr. This issue affects some unknown processing of the file fittr-flickr/features/easy-exif.js of the component EXIF Preview Handler. The manipulation leads to cross site scripting. The attack may be initiated...

6.1CVSS4.5AI score0.00536EPSS
SaveExploits0References3
Prion
Prion
•added 2023/01/13 6:15 p.m.•22 views

Cross site scripting

A vulnerability, which was classified as problematic, has been found in dpup fittr-flickr. This issue affects some unknown processing of the file fittr-flickr/features/easy-exif.js of the component EXIF Preview Handler. The manipulation leads to cross site scripting. The attack may be initiated...

5.8CVSS6.6AI score0.00536EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/01/13 5:12 p.m.•20 views

CVE-2009-10002 dpup fittr-flickr EXIF Preview easy-exif.js cross site scripting

A vulnerability, which was classified as problematic, has been found in dpup fittr-flickr. This issue affects some unknown processing of the file fittr-flickr/features/easy-exif.js of the component EXIF Preview Handler. The manipulation leads to cross site scripting. The attack may be initiated...

4CVSS6.3AI score0.00536EPSS
SaveExploits0References3
CVE
CVE
•added 2023/01/13 5:12 p.m.•61 views

CVE-2009-10002

The CVE concerns dpup fittr-flickr, specifically the EXIF Preview Handler’s file fittr-flickr/features/easy-exif.js. The vulnerability is a cross-site scripting flaw introduced by unknown processing in that file, with remote initiation possible. Multiple sources (NVD, Red Hat, CVE lists, CNCVD/CN...

6.1CVSS3.5AI score0.00536EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/13 12:00 a.m.•5 views

CVE-2009-10002: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in dpup fittr-flickr. This issue affects some unknown processing of the file fittr-flickr/features/easy-exif.js of the component EXIF Preview Handler. The manipulation leads to cross site scripting. The attack may be initiated...

6.1CVSS3.7AI score0.00536EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/01/13 12:00 a.m.•16 views

PT-2023-9870 · Unknown · Dpup Fittr-Flickr

Name of the Vulnerable Software and Affected Versions: dpup fittr-flickr affected versions not specified Description: A vulnerability has been found in dpup fittr-flickr, affecting some unknown processing of the file fittr-flickr/features/easy-exif.js of the component EXIF Preview Handler. The...

6.1CVSS4.1AI score0.00536EPSS
SaveExploits0References7
Prion
Prion
•added 2022/11/02 8:15 p.m.•27 views

Cross site scripting

A vulnerability has been found in phpipam and classified as problematic. Affected by this vulnerability is an unknown functionality of the file app/admin/import-export/import-load-data.php of the component Import Preview Handler. The manipulation leads to cross site scripting. The attack can be...

5.8CVSS6.1AI score0.00595EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2022/11/02 12:00 a.m.•25 views

phpIPAM 跨站脚本漏洞

phpIPAM is an open source PHP and MySQL based IP address management application IPAM. A security vulnerability exists in phpIPAM that stems from a cross-site scripting issue with unknown functionality in the app/admin/import-export/import-load-data.php file of the Import Preview Handler component...

6.1CVSS6.5AI score0.00595EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2022/11/02 12:00 a.m.•31 views

CVE-2022-3845 phpipam Import Preview import-load-data.php cross site scripting

A vulnerability has been found in phpipam and classified as problematic. Affected by this vulnerability is an unknown functionality of the file app/admin/import-export/import-load-data.php of the component Import Preview Handler. The manipulation leads to cross site scripting. The attack can be...

2.4CVSS4.4AI score0.00595EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/02 12:00 a.m.•7 views

CVE-2022-3845: Improper Neutralization

A vulnerability has been found in phpipam and classified as problematic. Affected by this vulnerability is an unknown functionality of the file app/admin/import-export/import-load-data.php of the component Import Preview Handler. The manipulation leads to cross site scripting. The attack can be...

6.1CVSS4.8AI score0.00595EPSS
SaveExploits0References3
Mend
Mend
•added 2022/11/02 12:00 a.m.•11 views

CVE-2022-3845

A vulnerability has been found in phpipam and classified as problematic. Affected by this vulnerability is an unknown functionality of the file app/admin/import-export/import-load-data.php of the component Import Preview Handler. The manipulation leads to cross site scripting. The attack can be...

6.1CVSS0.00595EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2019/06/03 9:29 p.m.•18 views

CVE-2019-10009

A Directory Traversal issue was discovered in the Web GUI in Titan FTP Server 2019 Build 3505. When an authenticated user attempts to preview an uploaded file through PreviewHandler.ashx by using a ....\ technique, arbitrary files can be loaded in the server response outside the root directory...

6.5CVSS6.7AI score0.11267EPSS
SaveExploits5References6
Positive Technologies
Positive Technologies
•added 2016/12/29 12:00 a.m.•38 views

PT-2022-24411 · Phpipam +1 · Phpipam +1

Name of the Vulnerable Software and Affected Versions: phpipam versions prior to 1.5.0 Description: A vulnerability has been found in phpipam, allowing for cross site scripting through the manipulation of an unknown functionality in the file app/admin/import-export/import-load-data.php of the...

9.8CVSS5.6AI score0.99714EPSS
SaveExploits86References76
Positive Technologies
Positive Technologies
•added 2012/08/25 12:00 a.m.•10 views

PT-2012-4765

Name of the Vulnerable Software and Affected Versions SquidClamav versions 5.x through 5.7 SquidClamav versions 6.x through 6.6 Description The issue arises from the squidclamav check preview handler function in squidclamav.c, which passes an unescaped URL to a system command call. This allows...

5CVSS0.03333EPSS
SaveExploits1References10
Rows per page
Query Builder