Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2007-3540

Multiple cross-site scripting (XSS) vulnerabilities in search.asp in rwAuction Pro 5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) show, (3) searchtype, (4) catid, and (5) searchtxt parameters, a different version and vectors than CVE-2005-4060.

CVSS 2.0 · 4.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Rainworx
Products
Rwauction Pro
CVE-2005-4060

Cross-site scripting (XSS) vulnerability in search.asp in rwAuction Pro 4.0 and 5.0 allows remote attackers to inject arbitrary web script or HTML via the searchtxt parameter.

CVSS 2.0 · 4.3 Medium EPSS 2.0% KEV · Not listed
Vendors
Rainworx
Products
Rwauction Pro