Search vulnerabilities

Results 3

Export CSV
CVE-2006-6721

Multiple cross-site scripting (XSS) vulnerabilities in shout.php in Knusperleicht ShoutBox 2.6 allow remote attackers to inject arbitrary web script or HTML via the (1) sbNick or (2) sbKommentar parameter.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Vendors
Products
CVE-2005-1220

Shoutbox SCRIPT 3.0.2 and earlier allows remote attackers to obtain sensitive information via a direct request to db/settings.dat, which displays usernames and password hashes.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Products
CVE-2006-3989

PHP remote file inclusion vulnerability in index.php in Knusperleicht Shoutbox 4.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sb_include_path parameter.

CVSS 2.0 · 5.1 Medium EPSS 3.4% KEV · Not listed
Vendors
Products