https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 10:14:16 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-110520 EUVD-2026-110520 https://cve.radiocsirt.org/vuln/euvd-2026-110520 https://cve.radiocsirt.org/vuln/fkie_cve-2012-1647 <p>Multiple cross-site scripting (XSS) vulnerabilities in the &#34;stand alone PHP application for the OSM Player,&#34; as used in the MediaFront module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.5 for Drupal, allow remote attackers to inject arbitrary web script or HTML via (1) $_SERVER[&#39;HTTP_HOST&#39;] or (2) $_SERVER[&#39;SCRIPT_NAME&#39;] to players/osmplayer/player/OSMPlayer.php, (3) playlist parameter to players/osmplayer/player/getplaylist.php, and possibly other vectors related to $_SESSION.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in the &#34;stand alone PHP application for the OSM Player,&#34; as used in the MediaFront module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.5 for Drupal, allow remote attackers to inject arbitrary web script or HTML via (1) $_SERVER[&#39;HTTP_HOST&#39;] or (2) $_SERVER[&#39;SCRIPT_NAME&#39;] to players/osmplayer/player/OSMPlayer.php, (3) playlist parameter to players/osmplayer/player/getplaylist.php, and possibly other vectors related to $_SESSION.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-1647 https://cve.radiocsirt.org/vuln/ghsa-q4fm-qwm6-q8fx <p>Multiple cross-site scripting (XSS) vulnerabilities in the &#34;stand alone PHP application for the OSM Player,&#34; as used in the MediaFront module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.5 for Drupal, allow remote attackers to inject arbitrary web script or HTML via (1) $_SERVER[&#39;HTTP_HOST&#39;] or (2) $_SERVER[&#39;SCRIPT_NAME&#39;] to players/osmplayer/player/OSMPlayer.php, (3) playlist parameter to players/osmplayer/player/getplaylist.php, and possibly other vectors related to $_SESSION.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in the &#34;stand alone PHP application for the OSM Player,&#34; as used in the MediaFront module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.5 for Drupal, allow remote attackers to inject arbitrary web script or HTML via (1) $_SERVER[&#39;HTTP_HOST&#39;] or (2) $_SERVER[&#39;SCRIPT_NAME&#39;] to players/osmplayer/player/OSMPlayer.php, (3) playlist parameter to players/osmplayer/player/getplaylist.php, and possibly other vectors related to $_SESSION.</p> https://cve.radiocsirt.org/vuln/ghsa-q4fm-qwm6-q8fx https://cve.radiocsirt.org/vuln/gsd-2012-1647 gsd-2012-1647 https://cve.radiocsirt.org/vuln/gsd-2012-1647