Lucene search
K

4 matches found

Vulnrichment
Vulnrichment
added 2025/12/30 12:32 p.m.3 views

CVE-2025-15248 sunhailin12315 product-review 商品评价系统 Write a Review cross site scripting

A security flaw has been discovered in sunhailin12315 product-review 商品评价系统 up to 91ead6890b4065bb45b7602d0d73348e75cb4639. This affects an unknown part of the component Write a Review. Performing manipulation of the argument content results in cross site scripting. The attack is possible to be...

5.1CVSS5.3AI score0.00019EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.2 views

product-review 代码注入漏洞

product-review is a product review system by sunhailin12315 individual developer. A code injection vulnerability exists in product-review, which stems from the incorrect manipulation of the parameter content in the component Write a Review, which could lead to a cross-site scripting attack...

5.1CVSS4.8AI score0.00019EPSS
Exploits0References3
Prion
Prion
added 2006/05/26 1:6 a.m.14 views

Cross site scripting

Cross-site scripting XSS vulnerability in 1 AlstraSoft Web Host Directory 1.2, aka 2 HyperStop WebHost Directory 1.2, might allow remote attackers to inject arbitrary web script or HTML via the "write a review" box. NOTE: since user reviews do not require administrator privileges, and an...

4.3CVSS6.1AI score0.00427EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2006/05/26 1:6 a.m.9 views

CVE-2006-2618

Cross-site scripting XSS vulnerability in 1 AlstraSoft Web Host Directory 1.2, aka 2 HyperStop WebHost Directory 1.2, might allow remote attackers to inject arbitrary web script or HTML via the "write a review" box. NOTE: since user reviews do not require administrator privileges, and an...

4.3CVSS5.6AI score0.00427EPSS
Exploits0References5
Rows per page
Query Builder