Lucene search
+L

3 matches found

Mend
Mend
•added 2021/12/02 12:17 p.m.•5 views

CVE-2021-43686

nZEDb v0.4.20 is affected by a Cross Site Scripting XSS vulnerability in www/pages/api.php. The exit function will terminate the script and print the message which has the input $GET't'...

6.1CVSS0.00641EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/12/02 12:00 a.m.•7 views

PT-2021-23912

Name of the Vulnerable Software and Affected Versions: nZEDb version 0.4.20 Description: The issue is related to a Cross Site Scripting XSS vulnerability in the www/pages/api.php file. The exit function terminates the script and prints a message that includes the input from $ GET't'. This allows...

6.1CVSS0.00641EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/02 12:00 a.m.•8 views

CVE-2021-43686: Improper Neutralization of Input During Web Page Generation

nZEDb v0.4.20 is affected by a Cross Site Scripting XSS vulnerability in www/pages/api.php. The exit function will terminate the script and print the message which has the input $GET't'...

6.1CVSS5.8AI score0.00641EPSS
SaveExploits1References2
Rows per page
Query Builder