Page 2 of 8 results (0.007 seconds)

CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2015-5660

https://notcve.org/view.php?id=CVE-2015-5660

Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code. Vulnerabilidad de CSRF en eXtplorer en versiones anteriores a 2.1.8 permite a atacantes remotos secuestrar la autenticación de usuarios arbitrarios en peticiones que ejecutan código PHP. • http://extplorer.net/news/18 http://jvn.jp/en/jp/JVN92520335/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2015-000126 • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2015-0896

https://notcve.org/view.php?id=CVE-2015-0896

Multiple cross-site scripting (XSS) vulnerabilities in eXtplorer before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Múltiples vulnerabilidades de XSS en eXtplorer anterior a 2.1.7 permiten a atacantes remotos inyectar secuencias de comandos web arbitrarios o HTML a través de vectores no especificados. • http://extplorer.net/news/16 http://jvn.jp/en/jp/JVN97099798/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2015-000039 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 2.6EPSS: 0%CPEs: 1EXPL: 1

CVE-2013-5951 – Joomla eXtplorer 2.1.3 Cross Site Scripting

https://notcve.org/view.php?id=CVE-2013-5951

Multiple cross-site scripting (XSS) vulnerabilities in eXtplorer 2.1.3, when used as a component for Joomla!, allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) application.js.php in scripts/ or (2) admin.php, (3) copy_move.php, (4) functions.php, (5) header.php, or (6) upload.php in include/. Múltiples vulnerabilidades de XSS en eXtplorer 2.1.3, cuando se utiliza como componente para Joomla!, permiten a atacantes remotos inyectar script Web o HTML arbitrarios a través del PATH_INFO hacia (1) application.js.php en scripts/ o (2) admin.php, (3) copy_move.php, (4) functions.php, (5) header.php o (6) upload.php en include/. Joomla eXtplorer component version 2.1.3 suffers from a cross site scripting vulnerability. • http://archives.neohapsis.com/archives/fulldisclosure/2014-03/0273.html http://secunia.com/advisories/57387 http://secunia.com/advisories/57482 http://www.debian.org/security/2014/dsa-2882 http://www.securityfocus.com/bid/66262 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •