Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
cross-site scripting vulnerabilities and exploits
(subscribe to this query)
3.5
CVSSv2
CVE-2018-8815
Cross-site scripting (XSS) vulnerability in the gallery function in Alkacon OpenCMS 10.5.3 allows remote malicious users to inject arbitrary web script or HTML via a malicious SVG image.
Alkacon Opencms 10.5.3
1 EDB exploit
4.3
CVSSv2
CVE-2018-18548
ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in File Manager.
Ajenti Ajenticp
1 EDB exploit
6.8
CVSSv2
CVE-2012-2629
Multiple cross-site request forgery (CSRF) and cross-site scripting (XSS) vulnerabilities in Axous 1.1.1 and previous versions allow remote malicious users to hijack the authentication of administrators for requests that (1) add an administrator account via an addnew action to ad...
Axous Axous
1 EDB exploit
4.3
CVSSv2
CVE-2012-3232
Cross-site scripting (XSS) vulnerability in search.php in web@all 2.0, as downloaded before May 30, 2012, allows remote malicious users to inject arbitrary web script or HTML via the _text[title] parameter.
Webatall Web\\@all 2.0
1 EDB exploit
6.8
CVSSv2
CVE-2006-5830
Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) topid, (2) forid, and (3) catid parameters to code/cp_forum_view.php; (4) choosed_...
Aiocp Aiocp 1.3.000
Aiocp Aiocp 1.3.007
Aiocp Aiocp 1.3.003
Aiocp Aiocp 1.3.004
Aiocp Aiocp 1.3.001
Aiocp Aiocp 1.3.002
Aiocp Aiocp 1.3.005
Aiocp Aiocp 1.3.006
5 EDB exploits
4.3
CVSSv2
CVE-2012-6644
Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.6 allow remote malicious users to inject arbitrary web script or HTML via the (1) cat parameter to channels.php, (2) collections.php, (3) groups.php, or (4) videos.php; (5) query parameter to search_result.php; o...
Clip-bucket Clipbucket 2.6
8 EDB exploits
4.3
CVSSv2
CVE-2018-8738
Airties 5444 1.0.0.18 and 5444TT 1.0.0.18 devices allow XSS.
Airties 5444 Firmware 1.0.0.18
Airties 5444tt Firmware 1.0.0.18
1 EDB exploit
6.8
CVSSv2
CVE-2006-5958
Multiple cross-site scripting (XSS) vulnerabilities in INFINICART allow remote malicious users to inject arbitrary web script or HTML via the (1) username and (2) password fields in (a) login.asp, (3) search field in (b) search.asp, and (4) email field in (c) sendpassword.asp.
Infinicart Infinicart
3 EDB exploits
3.5
CVSSv2
CVE-2018-20011
DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field.
Domainmod Domainmod
1 EDB exploit
3.5
CVSSv2
CVE-2012-1417
Multiple cross-site scripting (XSS) vulnerabilities in Local Phone book and Blacklist form in Yealink VOIP Phones allow remote authenticated users to inject arbitrary web script or HTML via the user field to cgi-bin/ConfigManApp.com.
Yealink Gigabit Color Ip Phone Sip-t32g -
Yealink Ip Phone Sip-t28p -
Yealink W52p -
Yealink Ultra-elegant Ip Phone Sip-t41p -
Yealink Gigabit Color Ip Phone Sip-t38g -
Yealink Ip Phone Sip-t19p -
Yealink Ip Video Phone Vp530 -
Yealink Ultra-elegant Ip Phone Sip-t46g -
Yealink Ultra-elegant Ip Phone Sip-t42g -
Yealink Ip Phone Sip-t21p -
Yealink Ip Phone Sip-t20p -
Yealink Ultra-elegant Ip Phone Sip-t48g -
Yealink Ip Phone Sip-t26p -
Yealink Ip Phone Sip-t22p -
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversal
CVE-2024-26978
CVE-2024-26982
wireless
CVE-2023-6949
CVE-2024-26980
CVE-2024-32766
CVE-2024-26939
cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
2
3
4
5
6
7
8
9
10
NEXT »