CVE & Exploit Intelligence Database

Updated 3h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

338,223 CVEs tracked 53,283 with exploits 4,731 exploited in wild 1,542 CISA KEV 3,930 Nuclei templates 37,826 vendors 42,577 researchers

42,457 results Clear all

CVE-2008-2861 1 PoC Analysis EPSS 0.07

Elinestudio Site Composer < 2.6 - XSS

Multiple cross-site scripting (XSS) vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) topic and (2) button parameters to ansFAQ.asp and the (3) id and (4) txtEmail parameters to login.asp.

CWE-79 Jun 25, 2008

CVE-2008-2842 1 PoC Analysis EPSS 0.04

Doitlive Cms < 2.50 - XSS

Cross-site scripting (XSS) vulnerability in edit/showmedia.asp in doITLive CMS 2.50 and earlier allows remote attackers to inject arbitrary web script or HTML via the FILE parameter.

CWE-79 Jun 25, 2008

CVE-2008-2852 EPSS 0.00

Nathan Neulinger Cgiwrap - XSS

Cross-site scripting (XSS) vulnerability in CGIWrap before 4.1, when an Internet Explorer based browser is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to failure to set the charset in error messages.

CWE-79 Jun 25, 2008

CVE-2008-2848 EPSS 0.00

Mindtouch Dekiwiki < 8.05 - XSS

Cross-site scripting (XSS) vulnerability in the search functionality in MindTouch DekiWiki before 8.05.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CWE-79 Jun 25, 2008

CVE-2008-2839 1 PoC Analysis EPSS 0.03

Traindepot - XSS

Cross-site scripting (XSS) vulnerability in the search module in Traindepot 0.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to index.php.

CWE-79 Jun 24, 2008

CVE-2008-2825 EPSS 0.00

Xerox Workcentre - XSS

Cross-site scripting (XSS) vulnerability in the embedded Web Server in Xerox WorkCentre M123, M128, and 133 and WorkCentre Pro 123, 128, and 133 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CWE-79 Jun 23, 2008

CVE-2008-2814 1 PoC Analysis EPSS 0.00

Shoutcastadmin Wallcity-server Shoutcast Admin Panel - XSS

Cross-site scripting (XSS) vulnerability in WallCity-Server Shoutcast Admin Panel 2.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter to the login interface. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CWE-79 Jun 23, 2008

CVE-2008-2787 1 PoC Analysis EPSS 0.08

Opendocman - XSS

Cross-site scripting (XSS) vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the last_message parameter.

CWE-79 Jun 20, 2008

CVE-2008-2788 EPSS 0.00

Opendocman - XSS

Cross-site scripting (XSS) vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the redirection parameter.

CWE-79 Jun 20, 2008

CVE-2008-2797 EPSS 0.00

Manageengine Oputils - XSS

Cross-site scripting (XSS) vulnerability in MainLayout.do in ManageEngine OpUtils 5.0 allows remote attackers to inject arbitrary web script or HTML via the hostName parameter, when viewing an SNMP graph. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CWE-79 Jun 20, 2008

CVE-2008-2783 3 PoCs Analysis EPSS 0.00

Horde Groupware - XSS

Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail Edition, and Kronolith allow remote attackers to inject arbitrary web script or HTML via the timestamp parameter to (1) week.php, (2) workweek.php, and (3) day.php; and (4) the horde parameter in the PATH_INFO to the default URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CWE-79 Jun 19, 2008

CVE-2008-2776 EPSS 0.00

DT Centrepiece - XSS

Cross-site scripting (XSS) vulnerability in search.asp in DT Centrepiece 4.0 allows remote attackers to inject arbitrary web script or HTML via the searchFor parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CWE-79 Jun 19, 2008

CVE-2008-2777 EPSS 0.00

Luca Corbo Ortro - XSS

Cross-site scripting (XSS) vulnerability in Ortro before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CWE-79 Jun 19, 2008

CVE-2008-2758 EPSS 0.00

Xigla Absolute News Manager XE - XSS

Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute News Manager XE 3.2 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) pblname and (2) text parameters to (a) admin/search.asp, (3) name parameter to (b) admin/publishers.asp, and other unspecified vectors to (c) anmviewer.asp and (d) editarticleX.asp in admin/. NOTE: some of these details are obtained from third party information.

CWE-79 Jun 18, 2008

CVE-2008-2766 EPSS 0.00

Xigla Absolute Image Gallery XE - XSS

Cross-site scripting (XSS) vulnerability in Xigla Absolute Image Gallery XE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in (1) admin/search.asp and (2) gallery.asp.

CWE-79 Jun 18, 2008

CVE-2008-2768 EPSS 0.00

Xigla Absolute Poll Manager XE - XSS

Cross-site scripting (XSS) vulnerability in admin/search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator role privileges to inject arbitrary web script or HTML via unspecified vectors ("all fields").

CWE-79 Jun 18, 2008

CVE-2008-2761 EPSS 0.00

Xigla Absolute Banner Manager - XSS

Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Banner Manager XE 2.0 allow remote authenticated administrators to inject arbitrary web script or HTML via the text parameter in (1) searchbanners.asp and (2) listadvertisers.asp, and other unspecified fields. NOTE: some of these details are obtained from third party information.

CWE-79 Jun 18, 2008

CVE-2008-2756 EPSS 0.01

Xigla Absolute Control Panel XE - XSS

Cross-site scripting (XSS) vulnerability in admin/users.asp in Xigla Absolute Control Panel XE 1.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter and other unspecified parameters. NOTE: some of these details are obtained from third party information.

CWE-79 Jun 18, 2008

CVE-2008-2759 EPSS 0.01

Xigla Absolute Form Processor XE - XSS

Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) showfields, (2) text, and (3) submissions parameters to search.asp and the (4) name parameter to users.asp. NOTE: some of these details are obtained from third party information.

CWE-79 Jun 18, 2008

CVE-2008-2764 EPSS 0.00

Xigla Absolute Live Support XE - XSS

Cross-site scripting (XSS) vulnerability in admin/search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors ("all fields").

CWE-79 Jun 18, 2008