Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

hboeck.de vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2010-1482
Cross-site scripting (XSS) vulnerability in admin/editprefs.php in the backend in CMS Made Simple (CMSMS) prior to 1.7.1 might allow remote malicious users to inject arbitrary web script or HTML via the date_format_string parameter.
Cmsmadesimple Cms Made Simple 1.2Cmsmadesimple Cms Made Simple 1.1.2Cmsmadesimple Cms Made Simple 0.10Cmsmadesimple Cms Made Simple 1.6.7Cmsmadesimple Cms Made Simple 1.6Cmsmadesimple Cms Made Simple 1.5.3Cmsmadesimple Cms Made Simple 1.2.5Cmsmadesimple Cms Made Simple 1.2.3Cmsmadesimple Cms Made Simple 1.0.7Cmsmadesimple Cms Made Simple 1.0.4Cmsmadesimple Cms Made Simple 0.11.1Cmsmadesimple Cms Made Simple 0.10.4Cmsmadesimple Cms Made Simple 1.1Cmsmadesimple Cms Made Simple 1.0Cmsmadesimple Cms Made Simple 0.11Cmsmadesimple Cms Made Simple 1.4.1Cmsmadesimple Cms Made Simple 1.3Cmsmadesimple Cms Made Simple 1.6.5Cmsmadesimple Cms Made Simple 1.6.4Cmsmadesimple Cms Made Simple 1.6.3Cmsmadesimple Cms Made Simple 1.6.2Cmsmadesimple Cms Made Simple 1.6.1
NA
CVE-2011-0746
Cross-site request forgery (CSRF) vulnerability in Forms/PortForwarding_Edit_1 on the ZyXEL O2 DSL Router Classic allows remote malicious users to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences via the PortRule_Name param...
Zyxel O2 Dsl Router Classic
NA
CVE-2008-1386
Multiple cross-site scripting (XSS) vulnerabilities in the installer in Serendipity (S9Y) 1.3 allow remote malicious users to inject arbitrary web script or HTML via (1) unspecified path fields or (2) the database host field. NOTE: the timing window for exploitation of this issue...
S9y Serendipity 1.3
NA
CVE-2007-6205
Cross-site scripting (XSS) vulnerability in the remote RSS sidebar plugin (serendipity_plugin_remoterss) in S9Y Serendipity prior to 1.2.1 allows remote malicious users to inject arbitrary web script or HTML via a link in an RSS feed.
S9y Serendipity 0.4S9y Serendipity 0.5S9y Serendipity 0.7S9y Serendipity 0.7.1S9y Serendipity 0.8.1S9y Serendipity 0.8.2S9y Serendipity 0.8 Beta6S9y Serendipity 0.9S9y Serendipity 1.1.3S9y Serendipity 1.1.4S9y Serendipity 0.6 Pl1S9y Serendipity 0.6 Pl2S9y Serendipity 0.7 Beta3S9y Serendipity 0.7 Beta4S9y Serendipity 0.8.5S9y Serendipity 0.8 Beta 5S9y Serendipity 1.0.4S9y Serendipity 1.0 Beta1S9y Serendipity 0.5 Pl1S9y Serendipity 0.6S9y Serendipity 0.7 Beta1S9y Serendipity 0.7 Beta2
NA
CVE-2010-1481
Cross-site scripting (XSS) vulnerability in the table feature in PmWiki 2.2.15 allows remote authenticated users to inject arbitrary web script or HTML via the width attribute.
Pmwiki Pmwiki 2.2.15
NA
CVE-2007-1871
Cross-site scripting (XSS) vulnerability in chcounter 3.1.3 allows remote malicious users to inject arbitrary web script or HTML via the login_name parameter to /stats/.
Chcounter Chcounter 3.1.3
NA
CVE-2007-3693
Cross-site scripting (XSS) vulnerability in Gobi as of 20070711, built on Helma, allows remote malicious users to inject arbitrary web script or HTML via the q parameter to the search function.
Gobi And Helma Gobi
NA
CVE-2007-3694
Cross-site scripting (XSS) vulnerability in login.php in Miro Project Broadcast Machine 0.9.9.9 allows remote malicious users to inject arbitrary web script or HTML via the username parameter.
Getmiro Broadcast Machine 0.9.9.9
NA
CVE-2008-1385
Cross-site scripting (XSS) vulnerability in the Top Referrers (aka referrer) plugin in Serendipity (S9Y) prior to 1.3.1 allows remote malicious users to inject arbitrary web script or HTML via the Referer HTTP header.
S9y Serendipity 0.7S9y Serendipity 0.7.1S9y Serendipity 1.0S9y Serendipity 1.0.1S9y Serendipity 1.1.3S9y Serendipity 1.1.4S9y Serendipity 0.8S9y Serendipity 0.8.1S9y Serendipity 0.8.2S9y Serendipity 1.0.2S9y Serendipity 1.0.3S9y Serendipity 1.2S9y Serendipity 1.2.1S9y Serendipity 0.5 Pl1S9y Serendipity 0.6 Pl3S9y Serendipity 0.9S9y Serendipity 0.9.1S9y Serendipity 1.1.1S9y Serendipity 1.1.2S9y Serendipity 0.3S9y Serendipity 0.4S9y Serendipity 0.8.3
NA
CVE-2007-1872
Cross-site scripting (XSS) vulnerability in toendaCMS 1.5.3 allows remote malicious users to inject arbitrary web script or HTML via the searchword parameter in a search id.
Toenda Software Development Toendacms 1.5.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29895blind SQL injectionCVE-2024-5064CVE-2023-52677CVE-2023-52682CVE-2024-30051CVE-2024-35849remote attackersremote
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook