PT-2019-13602

Name of the Vulnerable Software and Affected Versions Imagely NextGEN Gallery plugin versions prior to 3.2.11 Description A SQL injection issue exists, allowing a remote attacker to execute arbitrary SQL commands on the affected system via the modules/nextgen gallery display/package.module.nextge...

CVE-2019-11359

Cross-site scripting XSS vulnerability in display.php in I, Librarian 4.10 allows remote attackers to inject arbitrary web script or HTML via the project parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in display.php in I, Librarian 4.10 allows remote attackers to inject arbitrary web script or HTML via the project parameter...

CVE-2019-11359

Cross-site scripting XSS vulnerability in display.php in I, Librarian 4.10 allows remote attackers to inject arbitrary web script or HTML via the project parameter...

CVE-2019-11359: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in display.php in I, Librarian 4.10 allows remote attackers to inject arbitrary web script or HTML via the project parameter...

gorowan.com XSS vulnerability

Open Bug Bounty ID: OBB-539388 Description| Value ---|--- Affected Website:| gorowan.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-16758

Cross-site scripting XSS vulnerability in admin/partials/uif-access-token-display.php in the Ultimate Instagram Feed plugin before 1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "accesstoken" parameter...

PT-2017-14540

Name of the Vulnerable Software and Affected Versions Ultimate Instagram Feed plugin versions prior to 1.3 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the access token parameter in the...

CVE-2017-16758: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/partials/uif-access-token-display.php in the Ultimate Instagram Feed plugin before 1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "accesstoken" parameter...

christianflatshare.org XSS vulnerability

Vulnerable URL: http://www.christianflatshare.org/display.php?summarytype=ad%22%27--!%3E%3CScript%20/K/%3Econfirm1%3C/Script%20/K/%3Ehiddenads=type=towntype=offered=Reading=Berkshire=10=availabledate+desc=0&sortBed1;=1&sortBed2;=1&sortBed3;=1&sortBed4;=1sort=Update+results Details: Description|...

websaru.info XSS vulnerability

Vulnerable URL: http://www.websaru.info/display.php?word="autofocus onfocus="alert'OPENBUGBOUNTY'=search= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 184704 VIP website status:|...

jagrullar.se XSS vulnerability

Open Bug Bounty ID: OBB-98594 Description| Value ---|--- Affected Website:| jagrullar.se Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2011-3598

Multiple cross-site scripting XSS vulnerabilities in phpPgAdmin before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 a web page title, related to classes/Misc.php; or the 2 returnurl or 3 returndesc parameter to display.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in phpPgAdmin before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 a web page title, related to classes/Misc.php; or the 2 returnurl or 3 returndesc parameter to display.php...

CVE-2011-3598

Multiple cross-site scripting XSS vulnerabilities in phpPgAdmin before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 a web page title, related to classes/Misc.php; or the 2 returnurl or 3 returndesc parameter to display.php...

CVE-2011-3598

Multiple cross-site scripting XSS vulnerabilities in phpPgAdmin before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 a web page title, related to classes/Misc.php; or the 2 returnurl or 3 returndesc parameter to display.php...

CVE-2011-3598: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in phpPgAdmin before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 a web page title, related to classes/Misc.php; or the 2 returnurl or 3 returndesc parameter to display.php...

PT-2011-4544

Name of the Vulnerable Software and Affected Versions phpPgAdmin versions prior to 5.0.3 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The vulnerabilities are related to 1 a we...

E-Xoopport v3.1 eCal display.php (katid) SQL Injection Exploit

Exploit for php platform in category web applications ============================================================== E-Xoopport v3.1 eCal display.php katid SQL Injection Exploit ============================================================== = 5 this may take some minutes.. / EXPLOIT /...

Cross site scripting

Cross-site scripting XSS vulnerability in display.php in Obsession-Design Image-Gallery ODIG 1.1 allows remote attackers to inject arbitrary web script or HTML via the folder parameter...