EUVD-2024-1627

Malicious code in bioql PyPI...

CVE-2015-8667

Cross-site scripting XSS vulnerability in Reset Your Password module in Exponent CMS before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the Username/Email...

CVE-2015-8667: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Reset Your Password module in Exponent CMS before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the Username/Email...

CVE-2006-0103: Exposure of Sensitive Information to an Unauthorized Actor

TinyPHPForum 3.6 and earlier stores the 1 users/USERNAME.hash and 2 users/USERNAME.email files under the web root with insufficient access control, which allows remote attackers to list all registered users and possibly obtain other sensitive information...