Lucene search
K

8 matches found

Packet Storm News
Packet Storm News
added 2026/02/02 12:0 a.m.3 views

TWiki 6.0.1 Cross Site Scripting

A cross site scripting vulnerability exists in TWiki version 6.0.1 via the QUERYSTRING parameter. The vulnerability allows remote attackers to inject arbitrary web script or HTML. This issue is older research added to the archive...

4.3CVSS5.2AI score0.00336EPSS
Exploits2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2008-6693

Malware in sbrugna...

4.3CVSS6.4AI score0.00357EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/04/11 4:2 p.m.4 views

CVE-2025-32371

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. A url could be crafted to the DNN ImageHandler to render text from a querystring parameter. This text would display in the resulting image and a user that trusts the domain might think that t...

4.3CVSS6.4AI score0.00348EPSS
Exploits0References1
OSV
OSV
added 2020/09/09 6:15 p.m.2 views

CVE-2020-13127

A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.04.1 allows remote authenticated attackers to execute arbitrary SQL commands via the TASKSLISTpt.querystring parameter...

8.8CVSS7.6AI score0.00824EPSS
Exploits1References2
OSV
OSV
added 2018/11/16 6:29 p.m.1 views

CVE-2018-18761

SaltOS 3.1 r8126 allows action=login&querystring=&user=SQL SQL Injection...

9.8CVSS5.8AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2009/04/21 6:30 p.m.0 views

CVE-2008-6733

Cross-site scripting XSS vulnerability in the error handling page in DotNetNuke 4.6.2 through 4.8.3 allows remote attackers to inject arbitrary web script or HTML via the querystring parameter...

4.3CVSS5.9AI score0.00357EPSS
Exploits0References6
Prion
Prion
added 2009/04/21 6:30 p.m.15 views

Cross site scripting

Cross-site scripting XSS vulnerability in the error handling page in DotNetNuke 4.6.2 through 4.8.3 allows remote attackers to inject arbitrary web script or HTML via the querystring parameter...

4.3CVSS6.1AI score0.00357EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2009/04/21 6:30 p.m.14 views

CVE-2008-6733

Cross-site scripting XSS vulnerability in the error handling page in DotNetNuke 4.6.2 through 4.8.3 allows remote attackers to inject arbitrary web script or HTML via the querystring parameter...

4.3CVSS5.7AI score0.00357EPSS
Exploits0References5
Rows per page
Query Builder