Lucene search
+L

7 matches found

CNNVD
CNNVD
•added 2026/03/31 12:00 a.m.•25 views

WordPress plugin Appointment Booking and Scheduler Plugin – Truebooker 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS5.8AI score0.00205EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/31 12:00 a.m.•3 views

CVE-2026-1797: Missing Authorization

The Appointment Booking and Scheduler Plugin – Truebooker plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.4 through views php files. This makes it possible for unauthenticated attackers to view potentially sensitive information...

5.3CVSS5.7AI score0.00205EPSS
SaveExploits0References1
Prion
Prion
•added 2013/05/23 3:55 p.m.•23 views

Cross site scripting

Cross-site scripting XSS vulnerability in engine/lib/views.php in Elgg before 1.8.5 allows remote attackers to inject arbitrary web script or HTML via the view parameter to index.php. NOTE: some of these details are obtained from third party information...

4.3CVSS6.1AI score0.01187EPSS
SaveExploits0References5Affected Software1
Mend
Mend
•added 2013/05/23 3:00 p.m.•7 views

CVE-2012-6561

Cross-site scripting XSS vulnerability in engine/lib/views.php in Elgg before 1.8.5 allows remote attackers to inject arbitrary web script or HTML via the view parameter to index.php. NOTE: some of these details are obtained from third party information...

6.3CVSS0.01187EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/05/23 12:00 a.m.•10 views

CVE-2012-6561: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in engine/lib/views.php in Elgg before 1.8.5 allows remote attackers to inject arbitrary web script or HTML via the view parameter to index.php. NOTE: some of these details are obtained from third party information...

4.3CVSS6AI score0.01187EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/02/28 12:00 a.m.•6 views

CVE-2007-1165: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in DBGuestbook 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the dbsbasepath parameter to 1 utils.php, 2 guestbook.php, or 3 views.php in includes/...

7.5CVSS6.4AI score0.03171EPSS
SaveExploits2References2
zdt
zdt
•added 2007/02/21 12:00 a.m.•25 views

DBGuestbook 1.1 (dbs_base_path) Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== DBGuestbook 1.1 dbsbasepath Remote File Include Vulnerabilities =================================================================== DBGuestBook 1.1 Found by Denven ERROR:...

7.1AI score
SaveExploits0
Rows per page
Query Builder