22 matches found
CVE-2009-3512: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in MyWeight 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 date parameter to useraddfood.php, info parameter to 2 userforgotpwdform.php and 3 userlogin.php, and 4 return parameter to userlogin.php...
4.3CVSS5.8AI score0.01768EPSS
SaveExploits4References2
CVE-2005-1436: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via 1 the t parameter to view.php, 2 the ostickettitle parameter to header.php, 3 the em parameter to adminlogin.php, 4 the e parameter to userlogin.php, 5 the err parameter...
6.8CVSS5.9AI score0.01689EPSS
SaveExploits1References1
20