Leepeuker

Movary

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2026-23841

Exploit
  • EPSS 0.15%
  • Veröffentlicht 19.01.2026 18:35:21
  • Zuletzt bearbeitet 02.02.2026 15:17:06

Movary is a web application to track, rate and explore your movie watch history. Due to insufficient input validation, attackers can trigger cross-site scripting payloads in versions prior to 0.70.0. The vulnerable parameter is `?categoryCreated=`. V...

6.1

CVE-2026-23840

Exploit
  • EPSS 0.13%
  • Veröffentlicht 19.01.2026 18:32:50
  • Zuletzt bearbeitet 03.02.2026 14:47:15

Movary is a web application to track, rate and explore your movie watch history. Due to insufficient input validation, attackers can trigger cross-site scripting payloads in versions prior to 0.70.0. The vulnerable parameter is `?categoryDeleted=`. V...

6.1

CVE-2026-23839

Exploit
  • EPSS 0.13%
  • Veröffentlicht 19.01.2026 18:27:25
  • Zuletzt bearbeitet 03.02.2026 14:48:00

Movary is a web application to track, rate and explore your movie watch history. Due to insufficient input validation, attackers can trigger cross-site scripting payloads in versions prior to 0.70.0. The vulnerable parameter is `?categoryUpdated=`. V...

6.1

CVE-2025-64115

Exploit
  • EPSS 0.06%
  • Veröffentlicht 30.10.2025 17:39:19
  • Zuletzt bearbeitet 08.12.2025 15:34:33

Movary is a web application to track, rate and explore your movie watch history. Versions up to and including 0.68.0 use the HTTP Referer header value directly for redirects in multiple settings endpoints, allowing a crafted link to cause an open red...

6.1

CVE-2025-64116

Exploit
  • EPSS 0.06%
  • Veröffentlicht 30.10.2025 17:32:41
  • Zuletzt bearbeitet 08.12.2025 15:34:41

Movary is a web application to track, rate and explore your movie watch history. Prior to 0.69.0, the login page accepts a redirect parameter without validation, allowing attackers to redirect authenticated users to arbitrary external sites. This vul...