CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 2CVE-2008-0334 – pMachine Pro 2.4.1 - Multiple Cross-Site Scripting Vulnerabilities
https://notcve.org/view.php?id=CVE-2008-0334
17 Jan 2008 — Cross-site scripting (XSS) vulnerability in pm/language/spanish/preferences.php in PMachine Pro 2.4.1 allows remote attackers to inject arbitrary web script or HTML via the L_PREF_NAME[855] parameter. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en pm/language/spanish/preferences.php de PMachine Pro 2.4.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante el parámetro L_PREF_NAME[855]. • https://www.exploit-db.com/exploits/31027 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 2CVE-2006-0461 – PMachine ExpressionEngine 1.4.1 - HTTP Referrer HTML Injection
https://notcve.org/view.php?id=CVE-2006-0461
27 Jan 2006 — Cross-site scripting (XSS) vulnerability in core.input.php in ExpressionEngine 1.4.1 allows remote attackers to inject arbitrary web script or HTML via HTTP_REFERER (referer). • https://www.exploit-db.com/exploits/27127 •
CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 1CVE-2005-0513 – PMachine Pro 2.4 - Remote File Inclusion
https://notcve.org/view.php?id=CVE-2005-0513
19 Feb 2005 — PHP remote file inclusion vulnerability in mail_autocheck.php in the Email This Entry add-on for pMachine Pro 2.4, and possibly other versions including pMachine Free, allows remote attackers to execute arbitrary PHP code by directly requesting mail_autocheck.php and modifying the pm_path parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2003-1086. • https://www.exploit-db.com/exploits/25127 •
CVSS: 9.8EPSS: 1%CPEs: 3EXPL: 1CVE-2003-1086 – PMachine 2.2.1 - '/Lib.Inc.php' Remote File Inclusion / Command Execution
https://notcve.org/view.php?id=CVE-2003-1086
17 Jun 2003 — PHP remote file inclusion vulnerability in pm/lib.inc.php in pMachine Free and pMachine Pro 2.2 and 2.2.1 allows remote attackers to execute arbitrary PHP code by modifying the pm_path parameter to reference a URL on a remote web server that contains the code. • https://www.exploit-db.com/exploits/22776 •