PT-2018-16788

Name of the Vulnerable Software and Affected Versions PicturesPro Photo Cart versions 6 and 7 before Security-Patch-2018-B Description The issue allows remote attackers to access arbitrary customer accounts via a modified cookie. This is related to the files pc head.php, pc login.php, and pc logi...

toymahal.in XSS vulnerability

Open Bug Bounty ID: OBB-600554 Description| Value ---|--- Affected Website:| toymahal.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nauczyciel.edu.pl XSS vulnerability

Open Bug Bounty ID: OBB-594704 Description| Value ---|--- Affected Website:| nauczyciel.edu.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

intelliseeds.co.nz XSS vulnerability

Open Bug Bounty ID: OBB-592677 Description| Value ---|--- Affected Website:| intelliseeds.co.nz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mesana.org XSS vulnerability

Open Bug Bounty ID: OBB-592002 Description| Value ---|--- Affected Website:| mesana.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

thesimszone.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-586276 Description| Value ---|--- Affected Website:| thesimszone.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mymancosa.com XSS vulnerability

Open Bug Bounty ID: OBB-582612 Description| Value ---|--- Affected Website:| mymancosa.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

restauranttester.at XSS vulnerability

Open Bug Bounty ID: OBB-571751 Description| Value ---|--- Affected Website:| restauranttester.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-18093

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall School Management Script version 3.0.4 Description The issue exists due to SQL Injection in the Username and Password fields. This can be exploited via the /parents/Parent module/parent login.php endpoint, specifically through...

evodragon.net XSS vulnerability

Open Bug Bounty ID: OBB-567759 Description| Value ---|--- Affected Website:| evodragon.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

rebeca.ir XSS vulnerability

Open Bug Bounty ID: OBB-565016 Description| Value ---|--- Affected Website:| rebeca.ir Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on...

accounts.zaretti.com XSS vulnerability

Open Bug Bounty ID: OBB-556146 Description| Value ---|--- Affected Website:| accounts.zaretti.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

anlp.org XSS vulnerability

Open Bug Bounty ID: OBB-556138 Description| Value ---|--- Affected Website:| anlp.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dialostandfound.com XSS vulnerability

Open Bug Bounty ID: OBB-556137 Description| Value ---|--- Affected Website:| dialostandfound.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cndoil.ca XSS vulnerability

Open Bug Bounty ID: OBB-554696 Description| Value ---|--- Affected Website:| cndoil.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

infomed.ch XSS vulnerability

Open Bug Bounty ID: OBB-552096 Description| Value ---|--- Affected Website:| infomed.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Authentication flaw

The checkpassword function in html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to bypass authentication via an empty password...

CVE-2011-4069

html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to conduct LDAP injection attacks and consequently bypass authentication via a crafted username...

CVE-2011-4068

The checkpassword function in html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to bypass authentication via an empty password...

CVE-2011-4068

PacketFence before 3.0.2 is affected by an authentication bypass in the check_password function (html/admin/login.php). An unauthenticated remote attacker can bypass login with an empty password, gaining access to the system. Multiple sources reference PacketFence