Lucene search
+L

2 matches found

Cvelist
Cvelist
•added 2019/02/24 5:00 p.m.•38 views

CVE-2019-9078

zzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parameter because inc/stopsqlin.php does not block a mixed-case string such as sCrIpT...

5.4AI score0.00637EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/02/24 12:00 a.m.•3 views

CVE-2019-9078: Improper Neutralization of Input During Web Page Generation

zzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parameter because inc/stopsqlin.php does not block a mixed-case string such as sCrIpT...

5.4CVSS5.8AI score0.00637EPSS
SaveExploits1References2
Rows per page
Query Builder