Lucene search
+L

8 matches found

osv_cve
osv_cve
•added 2021/08/26 3:15 a.m.•32 views

CVE-2020-19709

Insufficient filtering of the tag parameters in feehicms 0.1.3 allows attackers to execute arbitrary web or HTML via a crafted payload...

6.1CVSS6.4AI score
SaveExploits0References1
CVE
CVE
•added 2021/08/26 2:22 a.m.•99 views

CVE-2020-19709

CVE-2020-19709 affects feehicms 0.1.3 (PHP-based CMS). The root cause is insufficient filtering of the tag parameter, enabling cross-site scripting that allows attackers to execute arbitrary web pages or HTML via a crafted payload. The connected documents describe XSS in feehicms but do not speci...

6.1CVSS6.3AI score0.00641EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/08/26 2:22 a.m.•4 views

CVE-2020-19709

Insufficient filtering of the tag parameters in feehicms 0.1.3 allows attackers to execute arbitrary web or HTML via a crafted payload...

6.1CVSS0.00641EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/26 12:00 a.m.•6 views

CVE-2020-19709: Improper Neutralization of Input During Web Page Generation

Insufficient filtering of the tag parameters in feehicms 0.1.3 allows attackers to execute arbitrary web or HTML via a crafted payload...

6.1CVSS6.3AI score0.00641EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/08/26 12:00 a.m.•6 views

PT-2021-10394

Name of the Vulnerable Software and Affected Versions: feehicms version 0.1.3 Description: The issue is related to insufficient filtering of the tag parameters, allowing attackers to execute arbitrary web or HTML content via a crafted payload. Recommendations: For feehicms version 0.1.3, consider...

6.1CVSS0.00641EPSS
SaveExploits1References6
CNVD
CNVD
•added 2017/03/13 12:00 a.m.•10 views

Stored Cross-Site Scripting Vulnerability in DuoDuoRebate.com System Tag Parameters

DuoDuo rebate system is for e-commerce rebate, shopping guide to provide solutions, is the open source PHP rebate site system. DuoDuo rebate website system V8.3UTF8 official version February 10, 2017 there are stored cross-site scripting vulnerabilities. Due to the tag parameter failed to filter ...

6.3AI score
SaveExploits0
Cvelist
Cvelist
•added 2009/06/17 5:00 p.m.•48 views

CVE-2009-2107

Multiple cross-site scripting XSS vulnerabilities in index.php in Webmedia Explorer webmex 5.09 and 5.10 allow remote attackers to inject arbitrary web script or HTML via event handlers such as onmouseover in the 1 search or 2 tag parameters; 3 arbitrary invalid parameter names that are not...

5.7AI score0.01452EPSS
SaveExploits2References4
NVD
NVD
•added 2006/03/07 11:02 a.m.•25 views

CVE-2006-1041

Multiple cross-site scripting XSS vulnerabilities in Gregarius 0.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 rssquery parameter to search.php or 2 tag parameter to tags.php...

4.3CVSS5.8AI score0.01338EPSS
SaveExploits0References7
Rows per page
Query Builder