Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
halil dalabasmaz vulnerabilities and exploits
(subscribe to this query)
435
VMScore
CVE-2015-2198
Multiple cross-site scripting (XSS) vulnerabilities in edit_prefs.php in Beehive Forum 1.4.4 allow remote malicious users to inject arbitrary web script or HTML via the (1) homepage_url, (2) pic_url, or (3) avatar_url parameter, which are not properly handled in an error message.
Beehive Forum Beehive Forum 1.4.4
1 EDB exploit
755
VMScore
CVE-2014-8997
Unrestricted file upload vulnerability in the Photo functionality in DigitalVidhya Digi Online Examination System 2.0 allows remote malicious users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in as...
Digitalvidhya Digi Online Examination System 2.0
1 EDB exploit
435
VMScore
CVE-2014-9516
Cross-site scripting (XSS) vulnerability in Social Microblogging PRO 1.5 allows remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to the default URI, related to the "Web Site" input in the Profile section.
Social Microblogging Pro Project Social Microblogging Pro 1.5
1 EDB exploit
435
VMScore
CVE-2014-8954
Multiple cross-site scripting (XSS) vulnerabilities in phpSound 1.0.5 allow remote malicious users to inject arbitrary web script or HTML via the (1) Title or (2) Description fields in a playlist or the (3) filter parameter in an explore action to index.php.
Codecanyon Phpsound 1.0.5
1 EDB exploit
405
VMScore
CVE-2014-9179
Cross-site scripting (XSS) vulnerability in the SupportEzzy Ticket System plugin 1.2.5 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the "URL (optional)" field in a new ticket.
Supportezzy Ticket System Project Supportezzy Ticket System 1.2.5
1 EDB exploit
435
VMScore
CVE-2014-100013
Multiple cross-site scripting (XSS) vulnerabilities in clientResponse 4.1 allow remote malicious users to inject arbitrary web script or HTML via the (1) Subject or (2) Message field.
Clientresponse Project Clientresponse 4.1
1 EDB exploit
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-23692
CVE-2012-1823
memory leak
CVE-2024-0627
CVE-2024-31402
privilege escalation
CVE-2024-36418
remote code execution
CVE-2024-27844
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started