Lucene search
+L

75 matches found

attackerkb
attackerkb
•added 2021/03/25 8:15 p.m.•11 views

CVE-2021-22889

Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the statsBreakdown parameter of stats.php and possibly other scripts due to single quotes not being escaped. An attacker could trick a user with access to the user interface of a Revive Adserver instance into clicking...

6.1CVSS6.5AI score0.30544EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2021/03/25 7:40 p.m.•47 views

CVE-2021-22889

Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the statsBreakdown parameter of stats.php and possibly other scripts due to single quotes not being escaped. An attacker could trick a user with access to the user interface of a Revive Adserver instance into clicking...

6.3AI score0.30544EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/03/25 12:00 a.m.•17 views

Revive Adserver 跨站脚本漏洞

Revive Adserver is an open source ad server under the GNU General Public License license with an integrated banner management interface and a tracking system for collecting statistical information. A reflected cross-site scripting vulnerability exists in the statsBreakdown parameter in stats.php ...

6.5CVSS5.4AI score0.30544EPSS
SaveExploits1References4
Hacker One
Hacker One
•added 2021/02/06 3:07 p.m.•106 views

Revive Adserver: Reflected XSS on /admin/stats.php

Linked to the report https://hackerone.com/reports/1083376 I found a reflected XSS attack on /admin/stats.php. Revive-Adserver version is revive-adserver-5.1.1. This time I found the parameter statsBreakdown - Go to...

4.3CVSS2.7AI score0.30544EPSS
SaveExploits1
OSV
OSV
•added 2021/01/28 5:15 p.m.•21 views

CVE-2021-22875

Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in stats.php via the setPerPage parameter...

6.1CVSS5.9AI score
SaveExploits0References3
NVD
NVD
•added 2021/01/28 5:15 p.m.•20 views

CVE-2021-22875

Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in stats.php via the setPerPage parameter...

6.1CVSS6AI score0.18242EPSS
SaveExploits2References3
Prion
Prion
•added 2021/01/28 5:15 p.m.•24 views

Cross site scripting

Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in stats.php via the setPerPage parameter...

4.3CVSS5.9AI score0.18242EPSS
SaveExploits2References3Affected Software1
CVE
CVE
•added 2021/01/28 4:12 p.m.•73 views

CVE-2021-22875

Revive Adserver is affected by CVE-2021-22875: a reflected XSS in stats.php via the setPerPage parameter, impacting Revive Adserver versions up to 5.1.0 (fixed in 5.1.1). The root cause is insufficient input validation/neutralization of user-supplied data in the request parameters, allowing injec...

6.1CVSS5.9AI score0.18242EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
•added 2021/01/28 4:12 p.m.•28 views

CVE-2021-22875

Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in stats.php via the setPerPage parameter...

6.1AI score0.18242EPSS
SaveExploits2References3
Hacker One
Hacker One
•added 2021/01/21 5:33 p.m.•106 views

Revive Adserver: Reflected XSS on /admin/stats.php

I found a reflected XSS attack on /admin/stats.php. Revive-Adserver version is revive-adserver-5.1.0. - Go to...

4.3CVSS3.3AI score0.18242EPSS
SaveExploits2
Cvelist
Cvelist
•added 2018/06/12 6:00 p.m.•34 views

CVE-2017-18291

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET user parameter...

9.9AI score0.0104EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2018/06/12 6:00 p.m.•34 views

CVE-2017-18288

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET game parameter...

9.9AI score0.0104EPSS
SaveExploits1References1
CVE
CVE
•added 2018/06/12 6:00 p.m.•57 views

CVE-2017-18288

The CVE-2017-18288 issue affects PvPGN Stats 2.4.6. A SQL injection exists in ladder/stats.php via the GET game parameter, due to insufficient input filtering in the code. This can allow an attacker to manipulate database queries, potentially accessing sensitive data. The connected Red Hat and CN...

9.8CVSS9.8AI score0.0104EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2018/06/12 6:00 p.m.•33 views

CVE-2017-18290

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET sortdirection parameter...

9.9AI score0.0104EPSS
SaveExploits1References1
NVD
NVD
•added 2017/03/28 2:59 a.m.•26 views

CVE-2016-9457

Revive Adserver before 3.2.3 suffers from Reflected XSS. www/admin/stats.php is vulnerable to reflected XSS attacks via multiple parameters that are not properly sanitised or escaped when displayed, such as setPerPage, pageId, bannerid, periodstart, periodend, and possibly others...

5.4CVSS5.4AI score0.0152EPSS
SaveExploits0References4
seebug.org
seebug.org
•added 2016/07/19 12:00 a.m.•24 views

wuzhicms coreframe\app\content\stats.php parameters keyid SQL injection

No description provided by source...

7.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2016/01/05 5:05 a.m.•10 views

pdfes.eprensa.com XSS vulnerability

Vulnerable URL: http://pdfes.eprensa.com/php/stats.php?ClientName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

6.3AI score
SaveExploits0
seebug.org
seebug.org
•added 2015/10/10 12:00 a.m.•61 views

mcGallery 'lang' Parameter Multiple Cross Site Scripting Vulnerabilities

背景: PhpForums.net mcGallery是一款网站图片管理脚本工具。 类型: xss 影响: 可注入任意web脚本或HTML 分析: PhpForums.net mcGallery 1.1版本中存在多个跨站脚本攻击漏洞。远程攻击者可以借助对 1admin.php, 2index.php, 3sess.php, 4stats.php, 5detail.php, 6resize.php, 7show.php的lang参数,注入任意web脚本或HTML。...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•38 views

VWar 1.5 stats.php vwar_root Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•23 views

mcGallery 1.1 - stats.php lang Parameter XSS

No description provided by source...

7.1AI score
SaveExploits0
Rows per page
Query Builder