ivoirmixdj.com XSS vulnerability

Vulnerable URL: https://ivoirmixdj.com/wp-admin/admin-ajax.php?tdthemename=Newspaper=7.2 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 180640 VIP website status:| No Check...

fashionghana.com XSS vulnerability

Vulnerable URL: https://www.fashionghana.com/wp-admin/admin-ajax.php?tdthemename=Newspaper=8.1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 468765 VIP website status:| No Coordinated Disclosure Timeline:...

olisa.tv XSS vulnerability

Vulnerable URL: https://www.olisa.tv/wp-admin/admin-ajax.php?tdthemename=Newspaper=8.1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 104768 VIP website status:| No Coordinated Disclosure Timeline: Description|...

yavmode.ru XSS vulnerability

Open Bug Bounty ID: OBB-279801 Description| Value ---|--- Affected Website:| yavmode.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

talkchelsea.net XSS vulnerability

Open Bug Bounty ID: OBB-279752 Description| Value ---|--- Affected Website:| talkchelsea.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

posizionamento-seo.com XSS vulnerability

Open Bug Bounty ID: OBB-279744 Description| Value ---|--- Affected Website:| posizionamento-seo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tomatoheart.com XSS vulnerability

Open Bug Bounty ID: OBB-279735 Description| Value ---|--- Affected Website:| tomatoheart.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tvguru.cz XSS vulnerability

Vulnerable URL: http://www.tvguru.cz/wp-admin/admin-ajax.php?tdthemename=Newspaper=8.1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 233179 VIP website status:| No Coordinated Disclosure Timeline: Description|...

fokus.mk XSS vulnerability

Open Bug Bounty ID: OBB-278814 Description| Value ---|--- Affected Website:| fokus.mk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

elcaribe.com.do XSS vulnerability

Open Bug Bounty ID: OBB-278813 Description| Value ---|--- Affected Website:| elcaribe.com.do Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Sql injection

The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has SQL injection with these wp-admin/admin-ajax.php POST actions: catalogueupdateorder list-item, videoupdateorder video-item, imageupdateorder list-item, taggroupupdateorder listitem, categoryproductsupdateorder...

CVE-2017-12199

The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has SQL injection with these wp-admin/admin-ajax.php POST actions: catalogueupdateorder list-item, videoupdateorder video-item, imageupdateorder list-item, taggroupupdateorder listitem, categoryproductsupdateorder...

WP Support Plus Responsive Ticket System < 8.0.0 - Privilege Escalation

You can login as anyone without knowing password because of incorrect usage of wpsetauthcookie. Username:...

scottfriedman.net XSS vulnerability

Vulnerable URL: http://www.scottfriedman.net/wp-content/plugins/all-video-gallery/ajax.php?id=%22/%3E%3CsvG/onLoad=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

spacehost.de XSS vulnerability

Vulnerable URL: https://spacehost.de/blog/wp-admin/admin-ajax.php Details: Description| Value ---|--- Patched:| Yes, at 14.05.2017 Latest check for patch:| 14.05.2017 20:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1786851 VIP website status:| No Check...

trittin.de XSS vulnerability

Vulnerable URL: https://www.trittin.de/wp-admin/admin-ajax.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check trittin.de SSL...

druckerei-hellendoorn.de XSS vulnerability

Vulnerable URL: http://www.druckerei-hellendoorn.de/wp-admin/admin-ajax.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

CVE-2017-6088

Multiple SQL injection vulnerabilities in EyesOfNetwork aka EON 5.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 bpname, 2 display, 3 search, or 4 equipment parameter to module/monitoringged/gedfunctions.php or the 5 type parameter to...

Alibaba Clone Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Alibaba Clone Script - SQL Injection Google Dork: N/A Date: 26.03.2017 Vendor Homepage: http://eagletechnosys.com/ Software: http://b2bbusinessdirectoryscript.com/alibaba-clone-script.html Demo: http://thealidemox.com Version: N...

Alibaba Clone Script - SQL Injection

Exploit Title: Alibaba Clone Script - SQL Injection Google Dork: N/A Date: 26.03.2017 Vendor Homepage: http://eagletechnosys.com/ Software: http://b2bbusinessdirectoryscript.com/alibaba-clone-script.html Demo: http://thealidemox.com Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit Author:...