Search vulnerabilities

Results 2

Export CSV
CVE-2007-3485

Multiple cross-site scripting (XSS) vulnerabilities in Yandex.Server allow remote attackers to inject arbitrary web script or HTML via the (1) query or (2) within parameter to the default URI.

CVSS 2.0 · 4.3 Medium EPSS 1.0% KEV · Not listed
Vendors
Products
CVE-2012-2941

Cross-site scripting (XSS) vulnerability in search/ in Yandex.Server 2010 9.0 Enterprise allows remote attackers to inject arbitrary web script or HTML via the text parameter.

CVSS 2.0 · 4.3 Medium EPSS 1.6% KEV · Not listed
Vendors