The Tools module in fx-APP 0.0.8.1 allows remote attackers to misrepresent the contents of a web page via an arbitrary URL in the url parameter to a showhtml action for index.php, which causes the URL to be displayed within an iframe.
Export limit exceeded: 11764 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 26253 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search vulnerabilities
CVE-2006-7022
CVSS 2.0 · 10.0 Critical
EPSS 2.4%
KEV · Not listed
Vendors
Products
CVE-2006-7023
Multiple cross-site scripting (XSS) vulnerabilities in fx-APP 0.0.8.1 allow remote attackers to inject arbitrary HTML or web script via (1) the search box, and the (2) url, (3) website, (4) comment, and (5) signature fields in the profile, and possibly (6) a menu item.
CVSS 2.0 · 4.3 Medium
EPSS 1.1%
KEV · Not listed
Vendors
Products
Page 1 of 1.