CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 2CVE-2002-2362 – MyMarket 1.71 - 'Form_Header.php' Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2002-2362
Cross-site scripting (XSS) vulnerability in form_header.php in MyMarket 1.71 allows remote attackers to inject arbitrary web script or HTML via the noticemsg parameter. • https://www.exploit-db.com/exploits/21961 http://www.iss.net/security_center/static/10470.php http://www.securityfocus.com/archive/1/296861 http://www.securityfocus.com/bid/6035 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2002-2364
https://notcve.org/view.php?id=CVE-2002-2364
Cross-site scripting (XSS) vulnerability in PHP Ticket 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a help ticket. • http://www.iss.net/security_center/static/9452.php http://www.securityfocus.com/bid/5124 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2001-0234
https://notcve.org/view.php?id=CVE-2001-0234
NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed user_username parameter. • http://archives.neohapsis.com/archives/bugtraq/2001-01/0460.html http://sourceforge.net/forum/forum.php?forum_id=60570 https://exchange.xforce.ibmcloud.com/vulnerabilities/6010 •