Vendor

Mangoswebv4 Project

Products

CVEs

Across products

Status

Private

Products

CVE	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-6478	Med	0.44	6.1	0.21	Mar 5, 2017	paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php (step parameter).
CVE-2017-6812	Med	0.40	6.1	0.00	Mar 11, 2017	paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.vote.php (id parameter).
CVE-2017-6811	Med	0.40	6.1	0.00	Mar 11, 2017	paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.shop.php (id parameter).
CVE-2017-6810	Med	0.40	6.1	0.00	Mar 11, 2017	paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.fplinks.php (linkid parameter).
CVE-2017-6809	Med	0.40	6.1	0.00	Mar 11, 2017	paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.donate.php (id parameter).
CVE-2017-6808	Med	0.40	6.1	0.00	Mar 11, 2017	paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.faq.php (id parameter).

CVE-2017-6478MedMar 5, 2017
risk 0.44cvss 6.1epss 0.21
paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php (step parameter).
CVE-2017-6812MedMar 11, 2017
risk 0.40cvss 6.1epss 0.00
paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.vote.php (id parameter).
CVE-2017-6811MedMar 11, 2017
risk 0.40cvss 6.1epss 0.00
paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.shop.php (id parameter).
CVE-2017-6810MedMar 11, 2017
risk 0.40cvss 6.1epss 0.00
paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.fplinks.php (linkid parameter).
CVE-2017-6809MedMar 11, 2017
risk 0.40cvss 6.1epss 0.00
paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.donate.php (id parameter).
CVE-2017-6808MedMar 11, 2017
risk 0.40cvss 6.1epss 0.00
paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.faq.php (id parameter).