Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2008-0940

Cross-site scripting (XSS) vulnerability in Plain Black WebGUI before 7.4.24 allows remote attackers to inject arbitrary web script or HTML when creating a username, a different vulnerability than CVE-2007-0407.

CVSS 2.0 · 4.3 Medium EPSS 1.0% KEV · Not listed
Vendors
Webgui
Products
Webgui
CVE-2008-3503

RSSFromParent in Plain Black WebGUI before 7.5.13 does not restrict view access to Collaboration System (CS) RSS feeds, which allows remote attackers to obtain sensitive information (CS data).

CVSS 2.0 · 5.0 Medium EPSS 1.5% KEV · Not listed
Vendors
Webgui
Products
Plain Black Webgui
CVE-2008-4798

The loadModule function in lib/WebGUI/Asset.pm in WebGUI before 7.5.30 (stable) allows remote attackers to execute arbitrary code by uploading a Perl module and accessing it via a crafted URL.

CVSS 2.0 · 9.3 Critical EPSS 4.0% KEV · Not listed
Vendors
Webgui
Products
Webgui