Lucene search
K

59 matches found

NVD
NVD
added 2024/11/01 4:15 p.m.26 views

CVE-2024-40490

An issue in Sourcebans++ before v.1.8.0 allows a remote attacker to obtain sensitive information via a crafted XAJAX call to the Forgot Password function...

7.5CVSS0.00463EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/01 12:0 a.m.16 views

CVE-2024-40490

An issue in Sourcebans++ before v.1.8.0 allows a remote attacker to obtain sensitive information via a crafted XAJAX call to the Forgot Password function...

0.00463EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/01 12:0 a.m.14 views

CVE-2024-40490

An issue in Sourcebans++ before v.1.8.0 allows a remote attacker to obtain sensitive information via a crafted XAJAX call to the Forgot Password function...

7.2AI score0.00463EPSS
Exploits0References1
CVE
CVE
added 2024/11/01 12:0 a.m.52 views

CVE-2024-40490

SourceBans++ before v1.8.0 contains a vulnerability allowing a remote attacker to obtain sensitive information via a crafted XAJAX call to the Forgot Password function. Affected component: Forgot Password handler in SourceBans++ (v1.7.x and earlier). Root cause: improper handling of XAJAX request...

7.5CVSS6.4AI score0.00463EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/01 12:0 a.m.7 views

PT-2024-28874 · Unknown · Sourcebans++

Name of the Vulnerable Software and Affected Versions: Sourcebans++ versions prior to 1.8.0 Description: The issue allows a remote attacker to obtain sensitive information via a crafted XAJAX call to the Forgot Password function. This occurs in Sourcebans++ when the attacker uses a crafted XAJAX...

7.5CVSS6.8AI score0.00463EPSS
Exploits0References5
Prion
Prion
added 2017/09/11 8:29 p.m.12 views

Cross site scripting

Cross-site scripting XSS vulnerability in SourceBans before 2.0 pre-alpha allows remote attackers to inject arbitrary web script or HTML via the advSearch parameter to index.php...

4.3CVSS6.1AI score0.03263EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2017/09/11 8:29 p.m.23 views

CVE-2015-8349

Cross-site scripting XSS vulnerability in SourceBans before 2.0 pre-alpha allows remote attackers to inject arbitrary web script or HTML via the advSearch parameter to index.php...

6.1CVSS6.1AI score0.03263EPSS
Exploits1References2
Cvelist
Cvelist
added 2017/09/11 8:0 p.m.25 views

CVE-2015-8349

Cross-site scripting XSS vulnerability in SourceBans before 2.0 pre-alpha allows remote attackers to inject arbitrary web script or HTML via the advSearch parameter to index.php...

6.1AI score0.03263EPSS
Exploits1References2
CVE
CVE
added 2017/09/11 8:0 p.m.70 views

CVE-2015-8349

SourceBans before 2.0 pre-alpha is affected by CVE-2015-8349, a Cross-Site Scripting (XSS) vulnerability in the advSearch parameter of index.php. The root cause is insufficient filtration/validation of input data, allowing remote attackers to inject arbitrary web script or HTML. Exploitation cont...

6.1CVSS6AI score0.03263EPSS
Exploits1References2Affected Software1
CNVD
CNVD
added 2017/05/18 12:0 a.m.1 views

sourcebans-pp cross-site scripting vulnerability

sourcebans-pp a.k.a. SourceBans++ is an advanced management system for the Source engine a 3D game engine by the Sourcebans team. The system allows system administrators to set administrative privileges for all users on the server and to terminate games on the server over the network. A cross-sit...

6.1CVSS6AI score0.00679EPSS
Exploits0References1
OSV
OSV
added 2017/04/17 2:59 p.m.14 views

CVE-2017-7891

sourcebans-pp SourceBans++ 1.5.4.7 has XSS in admin.comms.php via the rebanid parameter...

6.1CVSS6AI score
Exploits0References2
Prion
Prion
added 2017/04/17 2:59 p.m.11 views

Design/Logic Flaw

sourcebans-pp SourceBans++ 1.5.4.7 has XSS in admin.comms.php via the rebanid parameter...

4.3CVSS6AI score0.00679EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2017/04/17 2:59 p.m.19 views

CVE-2017-7891

sourcebans-pp SourceBans++ 1.5.4.7 has XSS in admin.comms.php via the rebanid parameter...

6.1CVSS6AI score0.00679EPSS
Exploits0References2
Cvelist
Cvelist
added 2017/04/17 2:0 p.m.19 views

CVE-2017-7891

sourcebans-pp SourceBans++ 1.5.4.7 has XSS in admin.comms.php via the rebanid parameter...

6.1AI score0.00679EPSS
Exploits0References2
CVE
CVE
added 2017/04/17 2:0 p.m.42 views

CVE-2017-7891

The CVE-2017-7891 issue concerns a Cross-Site Scripting (XSS) vulnerability in SourceBans++ (sourcebans-pp) version 1.5.4.7, specifically in admin.comms.php accessible via the rebanid parameter. The affected component is the admin interface of SourceBans++ and the root cause is an XSS flaw exploi...

6.1CVSS5.9AI score0.00679EPSS
Exploits0References2Affected Software1
securityvulns
securityvulns
added 2015/10/26 12:0 a.m.77 views

Reflected Cross-Site Scripting (XSS) in SourceBans

Advisory ID: HTB23273 Product: SourceBans Vendor: Sourcebans team Vulnerable Versions: 1.4.11 and probably prior Tested Version: 1.4.11 Advisory Publication: October 2, 2015 without technical details Vendor Notification: October 2, 2015 Public Disclosure: October 23, 2015 Vulnerability Type:...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2015/10/16 12:0 a.m.16 views

SourceBans <= 1.4.8 index.php LFI

No description provided by source...

7.1AI score
Exploits0
0day.today
0day.today
added 2015/10/06 12:0 a.m.26 views

SourceBans 1.4.11 Cross Site Scripting Vulnerability

SourceBans version 1.4.11 suffers from a cross site scripting vulnerability. Vendor: Sourcebans team Vulnerable Versions: 1.4.11 and probably prior Tested Version: 1.4.11 Advisory Publication: October 2, 2015 without technical details Vendor Notification: October 2, 2015 Public Disclosure: Octobe...

6.7AI score
Exploits0
Packet Storm
Packet Storm
added 2015/10/06 12:0 a.m.63 views

SourceBans 1.4.11 Cross Site Scripting

Advisory ID: HTB23273 Product: SourceBans Vendor: Sourcebans team Vulnerable Versions: 1.4.11 and probably prior Tested Version: 1.4.11 Advisory Publication: October 2, 2015 without technical details Vendor Notification: October 2, 2015 Public Disclosure: October 22, 2015 Vulnerability Type:...

6.4AI score0.03263EPSS
Exploits1
CNVD
CNVD
added 2015/10/03 12:0 a.m.1 views

SourceBans Reflective Cross-Site Scripting Vulnerability

SourceBans is an advanced management system for the Source engine a 3D game engine from the Sourcebans team. The system supports system administrators to set administrative privileges for all users on the server and to terminate games on the server side over the network. A reflective cross-site...

6.1CVSS6.2AI score0.03263EPSS
Exploits1References1
Rows per page
Query Builder