Export limit exceeded: 425880 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2009-3320

Cross-site scripting (XSS) vulnerability in scrivi.php in Zenas PaoLink (aka Pao-Link) 1.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

CVSS 2.0 · 4.3 Medium EPSS 1.5% KEV · Not listed
Vendors
Zenas
Products
Paolink
CVE-2009-3421

login.php in Zenas PaoBacheca Guestbook 2.1, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1.

CVSS 3.1 · 9.8 Critical EPSS 5.0% KEV · Not listed
Vendors
Zenas
Products
Pao-bacheca Guestbook
CVE-2009-3422

login.php in Zenas PaoLiber 1.1, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1.

CVSS 2.0 · 6.8 Medium EPSS 2.6% KEV · Not listed
Vendors
Zenas
Products
Paoliber
CVE-2009-3423

login.php in Zenas PaoLink 1.0, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting the login_ok parameter to 1.

CVSS 2.0 · 6.8 Medium EPSS 2.6% KEV · Not listed
Vendors
Zenas
Products
Paolink
CVE-2009-3493

Multiple cross-site scripting (XSS) vulnerabilities in Zenas PaoBacheca Guestbook 2.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) scrivi.php and (2) index.php.

CVSS 2.0 · 4.3 Medium EPSS 1.6% KEV · Not listed
Vendors
Zenas
Products
Paobacheca Guestbook