2 matches found
Simpnews 2.x admin/pwlost.php Unspecified XSS
No description provided by source. source: http://www.securityfocus.com/bid/20714/info SimpNews is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code execute...
7.1AI score
SaveExploits0
CVE-2006-5530: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Boesch SimpNews before 2.34.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 admin/index.php, 2 admin/pwlost.php, and unspecified other files. NOTE: the provenance of this information is unknown;...
4.3CVSS5.9AI score0.01727EPSS
SaveExploits3References2
20