CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2022-38089
https://notcve.org/view.php?id=CVE-2022-38089
24 Aug 2022 — Stored cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows a remote authenticated attacker to inject an arbitrary script. Vulnerabilidad de tipo cross-site scripting almacenado en Exment ((PHP8) exceedone/exment v5.0.2 y anteriores y exceedone/laravel-admin v3.0.0 y anteriores, (PHP7) exceedone/exment v4.4.2 y anteriores y exce... • https://exment.net/docs/#/release_note?id=v503-20220817 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2022-38080
https://notcve.org/view.php?id=CVE-2022-38080
24 Aug 2022 — Reflected cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows a remote authenticated attacker to inject an arbitrary script. Una vulnerabilidad de tipo cross-site scripting reflejado en Exment ((PHP8) exceedone/exment v5.0.2 y anteriores y exceedone/laravel-admin v3.0.0 y anteriores, (PHP7) exceedone/exment v4.4.2 y anteriores ... • https://exment.net/docs/#/release_note?id=v503-20220817 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.0EPSS: 1%CPEs: 2EXPL: 0CVE-2022-37333
https://notcve.org/view.php?id=CVE-2022-37333
24 Aug 2022 — SQL injection vulnerability in the Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows remote authenticated attackers to execute arbitrary SQL commands. Una vulnerabilidad de inyección SQL en Exment ((PHP8) exceedone/exment versiones v5.0.2 y anteriores y exceedone/laravel-admin v3.0.0 y anteriores, (PHP7) exceedone/exment versiones v4.4.2 y anteriores y exceedone/... • https://exment.net/docs/#/release_note?id=v503-20220817 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0CVE-2020-5619
https://notcve.org/view.php?id=CVE-2020-5619
25 Aug 2020 — Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via unspecified vectors. Una vulnerabilidad de tipo cross-site scripting en Exment versiones anteriores a v3.6.0, permite a atacantes autenticados remotos inyectar script arbitrario o HTML por medio de vectores no especificados • https://exment.net/docs/#/weakness/20200819 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0CVE-2020-5620
https://notcve.org/view.php?id=CVE-2020-5620
25 Aug 2020 — Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via a specially crafted file. Una vulnerabilidad de tipo cross-site scripting en Exment versiones anteriores a v3.6.0, permite a atacantes autenticados remotos inyectar script arbitrario o HTML por medio de un archivo especialmente diseñado • https://exment.net/docs/#/weakness/20200819 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •