Lucene search
+L

9 matches found

NVD
NVD
•added 2024/10/25 5:15 p.m.•26 views

CVE-2024-48743

Cross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute arbitrary code via the z parameter...

6.5CVSS0.00419EPSS
SaveExploits1References1
OSV
OSV
•added 2024/10/25 5:15 p.m.•15 views

CVE-2024-48743

Cross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute arbitrary code via the z parameter...

6.5CVSS6.1AI score0.00419EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/10/25 12:00 a.m.•16 views

PT-2024-33197 · Sentry · Sentry

Name of the Vulnerable Software and Affected Versions: Sentry version 6.0.9 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the z parameter. Recommendations: For Sentry version 6.0.9, consider restricting access to the vulnerable parameter z to...

6.5CVSS7.5AI score0.00419EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/10/25 12:00 a.m.•10 views

Sentry 安全漏洞

Sentry is an open source bug tracking and performance monitoring platform for developers from Sentry. A security vulnerability exists in Sentry version v.6.0.9. An attacker can exploit the vulnerability to execute arbitrary code via the z parameter...

6.5CVSS7.7AI score0.00419EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/25 12:00 a.m.•2 views

CVE-2024-48743: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute arbitrary code via the z parameter...

6.5CVSS6.6AI score0.00419EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/05/30 12:00 a.m.•3 views

CVE-2014-3921: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in popup.php in the Simple Popup Images plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the z parameter...

4.3CVSS6AI score0.01633EPSS
SaveExploits1References2
Patchstack
Patchstack
•added 2014/05/30 12:00 a.m.•21 views

WordPress Simple Popup Images Plugin - XSS

Because of this vulnerability in popup.php, the attackers can inject arbitrary web script or HTML via the "z" parameter. Solution Update the plugin...

4.3CVSS2.4AI score0.01633EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/12/10 12:00 a.m.•3 views

CVE-2007-6291: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in abm.aspx in Xigla Absolute Banner Manager .NET 4.0 allows remote attackers to execute arbitrary SQL commands via the z parameter...

7.5CVSS6.5AI score0.01063EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/05/10 12:00 a.m.•4 views

CVE-2004-1818: Undefined Security Weakness

Cross-site scripting XSS vulnerability in nmimage.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary script as other users by injecting arbitrary script into the z parameter...

6.8CVSS6.3AI score0.01981EPSS
SaveExploits2References1
Rows per page
Query Builder