Lucene search
+L

10 matches found

Cvelist
Cvelist
•added 2023/10/25 3:35 p.m.•47 views

CVE-2023-34447 iTop XSS vulnerability on pages/UI.php

iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, on pages/UI.php, cross site scripting is possible. This issue is fixed in versions 3.0.4 and 3.1.0...

8.8CVSS8.3AI score0.00809EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/10/25 3:35 p.m.•26 views

CVE-2023-34447 iTop XSS vulnerability on pages/UI.php

iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, on pages/UI.php, cross site scripting is possible. This issue is fixed in versions 3.0.4 and 3.1.0...

8.8CVSS6AI score0.00809EPSS
SaveExploits0References3
Mend
Mend
•added 2023/10/25 3:35 p.m.•10 views

CVE-2023-34447

iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, on pages/UI.php, cross site scripting is possible. This issue is fixed in versions 3.0.4 and 3.1.0...

8.8CVSS0.00809EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/25 12:00 a.m.•5 views

CVE-2023-34447: Improper Neutralization of Input During Web Page Generation

iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, on pages/UI.php, cross site scripting is possible. This issue is fixed in versions 3.0.4 and 3.1.0...

8.8CVSS5.6AI score0.00809EPSS
SaveExploits0References3
zdt
zdt
•added 2015/02/04 12:00 a.m.•28 views

WordPress Quasar Theme 1.9.1 Privilege Escalation Vulnerability

WordPress Quasar Theme version 1.9.1 suffers from a privilege escalation vulnerability. ------------------------------------------------------------------------------ WordPress Quasar Theme Previlege Escalation ------------------------------------------------------------------------------ - Theme...

7.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2014/03/20 12:00 a.m.•8 views

PT-2014-2463

Name of the Vulnerable Software and Affected Versions iTop versions 2.0, 1.2.1, 1.2, and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the search feature. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specificall...

4.3CVSS0.01661EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/03/20 12:00 a.m.•10 views

CVE-2013-0805: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the search feature in iTop aka IT Operations Portal 2.0, 1.2.1, 1.2, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 text parameter to pages/UI.php or 2 expression parameter to pages/runquery.php. NOTE: some ...

4.3CVSS5.9AI score0.01661EPSS
SaveExploits0References2
Prion
Prion
•added 2011/11/26 3:57 a.m.•32 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in iTop aka IT Operations Portal 1.1.181 and 1.2.0-RC-282 allow remote attackers to inject arbitrary web script or HTML via 1 a crafted company name, 2 a crafted database server name, 3 a crafted CSV file, 4 a crafted copy-and-paste action, 5 the...

4.3CVSS6AI score0.01491EPSS
SaveExploits8References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/11/26 12:00 a.m.•6 views

CVE-2011-4275: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in iTop aka IT Operations Portal 1.1.181 and 1.2.0-RC-282 allow remote attackers to inject arbitrary web script or HTML via 1 a crafted company name, 2 a crafted database server name, 3 a crafted CSV file, 4 a crafted copy-and-paste action, 5 the...

4.3CVSS5.9AI score0.01491EPSS
SaveExploits8References2
Positive Technologies
Positive Technologies
•added 2011/11/26 12:00 a.m.•7 views

PT-2011-4922

Name of the Vulnerable Software and Affected Versions iTop versions 1.1.181 through 1.2.0-RC-282 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved through various means, including: - ...

4.3CVSS0.01491EPSS
SaveExploits8References11
Rows per page
Query Builder