Filtered by vendor Mephisto
Subscriptions
Filtered by product Mephisto
Subscriptions
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2007-1873 | 1 Mephisto | 1 Mephisto | 2024-08-07 | N/A |
Cross-site scripting (XSS) vulnerability in Mephisto 0.7.3 allows remote attackers to inject arbitrary web script or HTML via the q parameter to the search script. | ||||
CVE-2007-1768 | 1 Mephisto | 2 Mephisto, Mephisto Edge | 2024-08-07 | N/A |
Cross-site scripting (XSS) vulnerability in app/helpers/application_helper.rb in Mephisto 0.7.3 and Mephisto Edge 20070325 allows remote attackers to inject arbitrary web script or HTML via the author name field in a comment. |
Page 1 of 1.