SQL Injection Vulnerability in about.php Page of HopYoung Website Builder System

The Hop-Up Network Building System is a website building system. A SQL injection vulnerability exists in the about.php page of the HopYoung website builder system, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability in the class2id parameter of the about.php page of the website building system of Kunming Senyu Technology Co.

Kunming Senyu Technology Co., Ltd. is a website building system. There is a SQL injection vulnerability in the class2id parameter on the about.php page of Kunming Senyu Technology Co. Attackers can use this vulnerability to obtain sensitive database information...

SQL Injection and Cross-site Scripting Vulnerabilities in Yitianlian's Enterprise Website Builder

Shenzhen Yitianlian Technology Co., Ltd. is a network operator providing online marketing services for enterprises. SQL injection and cross-site scripting vulnerabilities exist in the about.php and list.php parameters of the Yitianlian website builder system, which can be exploited by an attacker...

news.allaboutjazz.com XSS vulnerability

Vulnerable URL: https://news.allaboutjazz.com/faq.php?=1"...

psi.or.tz XSS vulnerability

Vulnerable URL: http://psi.or.tz/about-psi/tend.php?tend=1"...

ClipBucket Cross-Site Scripting Vulnerability (CNVD-2017-05016)

ClipBucket is an open source video sharing software. The software allows you to share videos to video sites and supports the light off effect when watching a movie. A cross-site scripting vulnerability exists in ClipBucket version 2.8.1. A remote attacker can exploit this vulnerability by injecti...

ZZCMS V8.0 SQL Injection Vulnerability in admin/about.php File

ZZCMS is an enterprise website builder. A SQL injection vulnerability exists in the ZZCMS V8.0 admin/about.php file. The lack of filtering of the 'id' parameter obtained from $post'id' allows an attacker to exploit the vulnerability to obtain sensitive database information...

Wordpress Theagency Themes File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress Themes Theagency File Upload Vulnerability Author : Berandal Google Dork: inurl:/wp-content/themes/theagency Tested on: Win 7, Linux Blog : http://www.maxteroit.com/ Video Proof :...

Design/Logic Flaw

XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /about-us/locations/index direction parameter...

CVE-2017-5877: Improper Neutralization of Input During Web Page Generation

XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /about-us/locations/index direction parameter...

UBUNTU-CVE-2017-5391

Special "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages in an iframe. If a content-injection bug were found in one of those pages this could allow for potential privilege escalation. This vulnerability affects Firefox 51...

Security vulnerabilities fixed in Firefox 51 — Mozilla

JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. Use-after-free while manipulating XSL in XSLT documents A memory corruption vulnerability in Skia that can occur when using transforms to make gradients, resulting in a potential...

Microsoft Edge Remote Elevation of Privilege Vulnerability

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge has an elevation of privilege vulnerability in the about:blank page cross-domain policy implementation that allows an attacker to access information in one domain and insert it into other domains. An attacker who...

Mozilla: Data from Pocket server improperly sanitized before execution (MFSA 2016-94, MFSA 2016-95)

HTML tags received from the Pocket server will be processed without sanitization and any JavaScript code executed will be run in the "about:pocket-saved" unprivileged page, giving it access to Pocket's messaging API through HTML injection. This vulnerability affects Firefox ESR 45.6 and Firefox...

hertz.com XSS vulnerability

Vulnerable URL: http://www.hertz.com/rentacar/abouthertz/index.jsp?targetPage=';alertOPENBUGBOUNTY;htc.config=// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6079 VIP website status:| Yes Check hertz.com SSL...

Wordpress forget-about-shortcode-buttons plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation of a set of PHP language development of the blogging platform, the platform supports PHP and MySQL server set up a personal blog site. get-about-shortcode-buttons is one of the plug-ins used to add CSS buttons in the post editor screen. A cross-site...

CVE-2016-1000133

Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...

CVE-2016-1000133

Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...

Cross site scripting

Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...

CVE-2016-1000133

The Nuclei template confirms CVE-2016-1000133: a reflected XSS in WordPress plugin forget-about-shortcode-buttons v1.1.1, enabling arbitrary script execution in a user’s browser and potential cookie theft. Affected component: WordPress plugin forget-about-shortcode-buttons (version 1.1.1). Root c...