Lucene search
IblsoftOnline Weather
3 matches found
CVE-2020-9407
IBL Online Weather before 4.3.5a allows attackers to obtain sensitive information by reading the IWEBSERVICE_JSONRPC_COOKIE cookie.
5.3CVSS5AI score0.00292EPSS
CVE-2020-9406
IBL Online Weather before 4.3.5a allows unauthenticated eval injection via the queryBCP method of the Auxiliary Service.
9.8CVSS9.6AI score0.009EPSS
CVE-2020-9405
IBL Online Weather before 4.3.5a allows unauthenticated reflected XSS via the redirect page.
6.1CVSS6AI score0.00707EPSS