Page 2 of 13 results (0.002 seconds)

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 2

CVE-2002-2362 – MyMarket 1.71 - 'Form_Header.php' Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2002-2362

31 Dec 2002 — Cross-site scripting (XSS) vulnerability in form_header.php in MyMarket 1.71 allows remote attackers to inject arbitrary web script or HTML via the noticemsg parameter. • https://www.exploit-db.com/exploits/21961 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2002-2364

https://notcve.org/view.php?id=CVE-2002-2364

31 Dec 2002 — Cross-site scripting (XSS) vulnerability in PHP Ticket 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a help ticket. • http://www.iss.net/security_center/static/9452.php • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2001-0234

https://notcve.org/view.php?id=CVE-2001-0234

03 May 2001 — NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed user_username parameter. • http://archives.neohapsis.com/archives/bugtraq/2001-01/0460.html •