Export limit exceeded: 16508 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2006-6007

save_profile.asp in WebEvents (Online Event Registration Template) 2.0 and earlier allows remote attackers to change the profiles, passwords, and other information for arbitrary users via a modified UserID parameter.

CVSS 2.0 · 5.0 Medium EPSS 1.0% KEV · Not listed
Vendors
Webevents
Products
Online Event Registration
CVE-2007-4146

Cross-site scripting (XSS) vulnerability in webevent.cgi in WebEvent 2.61 through 4.03 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CVSS 2.0 · 4.3 Medium EPSS 1.5% KEV · Not listed
Vendors
Webevents
Products
Webevents