Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 12 Nov 2026 07:50:08 +0000 cnvd-2017-01688 https://db.gcve.eu/vuln/cnvd-2017-01688 cnvd-2017-01688 https://db.gcve.eu/vuln/cnvd-2017-01688 fkie_cve-2017-5960 https://db.gcve.eu/vuln/fkie_cve-2017-5960 <p>An issue was discovered in Phalcon Eye through 0.4.1. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP GET parameters passed to the &#34;phalconeye-master/public/external/pydio/plugins/editor.webodf/frame.php&#34; URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.</p> <p>An issue was discovered in Phalcon Eye through 0.4.1. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP GET parameters passed to the &#34;phalconeye-master/public/external/pydio/plugins/editor.webodf/frame.php&#34; URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.</p> https://db.gcve.eu/vuln/fkie_cve-2017-5960 GHSA-35hc-96mm-v6rf https://db.gcve.eu/vuln/ghsa-35hc-96mm-v6rf <p>An issue was discovered in Phalcon Eye through 0.4.1. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP GET parameters passed to the &#34;phalconeye-master/public/external/pydio/plugins/editor.webodf/frame.php&#34; URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.</p> <p>An issue was discovered in Phalcon Eye through 0.4.1. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP GET parameters passed to the &#34;phalconeye-master/public/external/pydio/plugins/editor.webodf/frame.php&#34; URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.</p> https://db.gcve.eu/vuln/ghsa-35hc-96mm-v6rf gsd-2017-5960 https://db.gcve.eu/vuln/gsd-2017-5960 gsd-2017-5960 https://db.gcve.eu/vuln/gsd-2017-5960