Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2020-9407
Disclosure Date: February 26, 2020 (last updated February 21, 2025)
IBL Online Weather before 4.3.5a allows attackers to obtain sensitive information by reading the IWEBSERVICE_JSONRPC_COOKIE cookie.
0
Attacker Value
Unknown
CVE-2020-9406
Disclosure Date: February 26, 2020 (last updated February 21, 2025)
IBL Online Weather before 4.3.5a allows unauthenticated eval injection via the queryBCP method of the Auxiliary Service.
0
Attacker Value
Unknown
CVE-2020-9405
Disclosure Date: February 26, 2020 (last updated February 21, 2025)
IBL Online Weather before 4.3.5a allows unauthenticated reflected XSS via the redirect page.
0
