Page 6 of 28 results (0.007 seconds)

CVSS: 4.3EPSS: 0%CPEs: 4EXPL: 3

Cross-site scripting (XSS) vulnerability in links.php script in myPHPNuke 1.8.8, and possibly earlier versions, allows remote attackers to inject arbitrary HTML and web script via the (1) ratenum or (2) query parameters. • https://www.exploit-db.com/exploits/22268 http://archives.neohapsis.com/archives/bugtraq/2003-02/0231.html http://secunia.com/advisories/8125 http://www.osvdb.org/3931 http://www.securityfocus.com/bid/6892 https://exchange.xforce.ibmcloud.com/vulnerabilities/11376 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 7.8EPSS: 1%CPEs: 3EXPL: 0

MAILsweeper for SMTP 4.3.6 and 4.3.7 allows remote attackers to cause a denial of service (CPU consumption) via a PowerPoint attachment that either (1) is corrupt or (2) contains "embedded objects." • http://www.clearswift.com/download/bin/Patches/ReadMe_SMTP_438.htm http://www.securityfocus.com/bid/7562 https://exchange.xforce.ibmcloud.com/vulnerabilities/12052 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 5.0EPSS: 0%CPEs: 2EXPL: 3

Buffer overflow in 3D-FTP client 4.0 allows remote FTP servers to cause a denial of service (crash) and possibly execute arbitrary code via a long banner. • https://www.exploit-db.com/exploits/22551 http://securityreason.com/securityalert/3297 http://www.securityfocus.com/archive/1/319818 http://www.securityfocus.com/bid/7451 https://exchange.xforce.ibmcloud.com/vulnerabilities/11883 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •