2015-01-01

2015-01-02

2015-01-03

All (2) Critical (2) High (7) Medium (22) Low (2)

CVE-2014-9434 Jan 02, 19:59 LOW POC Monitor

Cross-site scripting (XSS) vulnerability in admin/managerrelated.php in the administrative backend in Absolut Engine 1.73 allows remote authenticated users to inject arbitrary web script or HTML via. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP XSS Absolut Engine

NVD Exploit-DB

CVSS 2.0

3.5

EPSS

0.7%

CVE-2014-9461 Jan 02, 22:59 LOW POC Monitor

Directory traversal vulnerability in models/Cart66.php in the Cart66 Lite plugin before 1.5.4 for WordPress allows remote authenticated users to read arbitrary files via a .. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP WordPress Path Traversal Wordpress Plugin Cart66 Lite +1

NVD

CVSS 2.0

3.5

EPSS

0.2%