Lucene search
+L

5 matches found

OSV
OSV
added 2022/08/13 12:0 a.m.12 views

GHSA-9HMC-87H4-W869 ForkCMS stored XSS via `start_date` parameter

A stored cross-site scripting XSS issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the startdate Parameter. This issue was patched in version 5.11.0...

4.8CVSS4.8AI score0.00697EPSS
SaveExploits1References4
NVD
NVD
added 2022/08/12 4:15 p.m.12 views

CVE-2022-35585

A stored cross-site scripting XSS issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the "startdate" Parameter...

4.8CVSS0.00697EPSS
SaveExploits1References1
OSV
OSV
added 2022/08/12 3:55 p.m.20 views

CVE-2022-35585

A stored cross-site scripting XSS issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the "startdate" Parameter...

4.8CVSS4.9AI score0.00697EPSS
SaveExploits1References3
NVD
NVD
added 2018/09/28 12:29 a.m.25 views

CVE-2018-17380

SQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the startdate, mstartdate, or menddate parameter...

9.8CVSS9.9AI score0.0328EPSS
SaveExploits5References2
Cvelist
Cvelist
added 2009/02/13 6:0 p.m.35 views

CVE-2008-6132

Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via the startdate parameter...

7.6AI score0.26143EPSS
SaveExploits5References8
Rows per page
Query Builder