Lucene search
+L

14353 matches found

NVD
NVD
added 2020/03/12 2:15 p.m.35 views

CVE-2020-6858

Hotels Styx through 1.0.0.beta8 allows HTTP response splitting due to CRLF Injection. This is exploitable if untrusted user input can appear in a response header...

6.5CVSS6.4AI score0.01162EPSS
SaveExploits1References2
OSV
OSV
added 2020/03/12 2:15 p.m.15 views

CVE-2020-6858

Hotels Styx through 1.0.0.beta8 allows HTTP response splitting due to CRLF Injection. This is exploitable if untrusted user input can appear in a response header...

6.5CVSS7.5AI score
SaveExploits0References2
Prion
Prion
added 2020/03/12 2:15 p.m.23 views

Crlf injection

Hotels Styx through 1.0.0.beta8 allows HTTP response splitting due to CRLF Injection. This is exploitable if untrusted user input can appear in a response header...

4.3CVSS6.3AI score0.01162EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2020/03/12 1:38 p.m.42 views

CVE-2020-6858

Hotels Styx through 1.0.0.beta8 allows HTTP response splitting due to CRLF Injection. This is exploitable if untrusted user input can appear in a response header...

6.6AI score0.01162EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2020/03/12 12:00 a.m.9 views

PT-2020-12134 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to inject arbitrary web script or HTML via the GET parameter p in the admin/edit-article.php file. This enables reflected XSS attacks. Recommendations: For...

4.8CVSS4.9AI score0.00611EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2020/03/12 12:00 a.m.18 views

PT-2020-12143 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to inject arbitrary web script or HTML via the sort parameter in the "admin/manage-categories.php" page, enabling reflected XSS attacks. Recommendations: F...

4.8CVSS5.1AI score0.00611EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2020/03/12 12:00 a.m.11 views

PT-2020-12144 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to inject arbitrary web script or HTML via the sort parameter in the "admin/manage-comments.php" page. This enables attackers to perform a Reflected XSS...

4.8CVSS5.1AI score0.00611EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2020/03/12 12:00 a.m.7 views

PT-2020-12067 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited in admin/add-news.php by adding a question mark ? followed ...

4.8CVSS5.5AI score0.00733EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
added 2020/03/12 12:00 a.m.7 views

PT-2020-12086 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited in admin/kb-backup.php by adding a question mark ? followed...

4.8CVSS5.5AI score0.00733EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
added 2020/03/12 12:00 a.m.8 views

PT-2020-12088 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited by injecting arbitrary web script or HTML in...

4.8CVSS5.4AI score0.00733EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
added 2020/03/12 12:00 a.m.7 views

PT-2020-12092 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited by injecting arbitrary web script or HTML in...

4.8CVSS5.4AI score0.00733EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
added 2020/03/12 12:00 a.m.11 views

PT-2020-12116 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited in admin/report-category.php by adding a question mark ?...

4.8CVSS5.5AI score0.00733EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
added 2020/03/12 12:00 a.m.7 views

PT-2020-12080 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited in admin/edit-user.php by adding a question mark ? followed...

4.8CVSS5.5AI score0.00733EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
added 2020/03/12 12:00 a.m.26 views

PT-2020-12142 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to inject arbitrary web script or HTML via the sort parameter in the "admin/manage-templates.php" page. This can lead to reflected XSS attacks...

4.8CVSS5.1AI score0.00611EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2020/03/12 12:00 a.m.5 views

PT-2020-12061 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited in admin/add-article.php by adding a question mark ? follow...

4.8CVSS5.4AI score0.00733EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
added 2020/03/12 12:00 a.m.6 views

PT-2020-12063 · Chadha · Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited in admin/add-field.php by adding a question mark ? followed...

4.8CVSS5.4AI score0.00733EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
added 2020/03/12 12:00 a.m.8 views

PT-2020-12072 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited in admin/edit-category.php by adding a question mark ?...

4.8CVSS5.5AI score0.00733EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
added 2020/03/12 12:00 a.m.7 views

PT-2020-12077 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited in admin/edit-news.php by adding a question mark ? followed...

4.8CVSS5.5AI score0.00733EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
added 2020/03/12 12:00 a.m.8 views

PT-2020-12090 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS in admin/manage-comments.php. This can be achieved by adding a question mark ? followed by...

4.8CVSS5.5AI score0.00733EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
added 2020/03/12 12:00 a.m.10 views

PT-2020-12109 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited by injecting arbitrary web script or HTML in...

4.8CVSS5.4AI score0.00733EPSS
SaveExploits3References3
Rows per page
Query Builder