Export limit exceeded: 425910 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425910 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2010-2344

Multiple cross-site scripting (XSS) vulnerabilities in odCMS 1.06, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the Page parameter to (1) _main/index.php, (2) _members/index.php, (3) _forum/index.php, (4) _docs/index.php, and (5) _announcements/index.php.

CVSS 2.0 · 4.3 Medium EPSS 1.5% KEV · Not listed
Vendors
Odcms
Products
Odcms
CVE-2010-2345

Cross-site request forgery (CSRF) vulnerability in odCMS 1.06, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests that change the administrative password, and other unspecified requests.

CVSS 2.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Odcms
Products
Odcms