Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2007-1906

Directory traversal vulnerability in richedit/keyboard.php in eCardMAX HotEditor (Hot Editor) 4.0, and the HotEditor plugin for MyBB, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the first parameter.

CVSS 2.0 · 6.8 Medium EPSS 3.3% KEV · Not listed
Vendors
Ecardmax.com Mybb
Products
Hot Editor Mybb Hot Editor Plugin
CVE-2009-3598

Cross-site scripting (XSS) vulnerability in survey_result.php in eCardMAX FormXP 2007 allows remote attackers to inject arbitrary web script or HTML via the sid parameter.

CVSS 2.0 · 4.3 Medium EPSS 1.5% KEV · Not listed
Vendors
Ecardmax.com
Products
Formxp
CVE-2006-0093

Cross-site scripting (XSS) vulnerability in index.php in @Card ME PHP allows remote attackers to inject arbitrary web script or HTML via the cat parameter.

CVSS 2.0 · 4.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Ecardmax.com
Products
Atcard Me Php