Export limit exceeded: 425894 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2009-3856

Cross-site scripting (XSS) vulnerability in the default URI in news/ in Twilight CMS before 4.1 allows remote attackers to inject arbitrary web script or HTML via the calendar parameter. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 4.3 Medium EPSS 3.3% KEV · Not listed
Vendors
Twilightcms
Products
Twilight Cms
CVE-2013-4899

Cross-site scripting (XSS) vulnerability in Twilight CMS 5.17 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the gallery/ page.

CVSS 2.0 · 4.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Twilightcms
Products
Twilight Cms
CVE-2013-4900

Directory traversal vulnerability in DeWeS web server 0.4.2 and possibly earlier, as used in Twilight CMS, allows remote attackers to read arbitrary files via a ..%5c (dot dot encoded backslash) in a GET request.

CVSS 2.0 · 5.0 Medium EPSS 3.9% KEV · Not listed
Vendors
Twilightcms
Products
Twilight Cms