amazingbeads.net XSS vulnerability

Open Bug Bounty ID: OBB-614250 Description| Value ---|--- Affected Website:| amazingbeads.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ffrandonnee-puy-de-dome.fr XSS vulnerability

Open Bug Bounty ID: OBB-568002 Description| Value ---|--- Affected Website:| ffrandonnee-puy-de-dome.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sydneylargen.com XSS vulnerability

Open Bug Bounty ID: OBB-537684 Description| Value ---|--- Affected Website:| sydneylargen.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

moorefarmservices.com XSS vulnerability

Open Bug Bounty ID: OBB-537677 Description| Value ---|--- Affected Website:| moorefarmservices.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tenaxpraha.cz XSS vulnerability

Open Bug Bounty ID: OBB-537678 Description| Value ---|--- Affected Website:| tenaxpraha.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

leonsorianoart.com XSS vulnerability

Open Bug Bounty ID: OBB-537669 Description| Value ---|--- Affected Website:| leonsorianoart.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mstuonti.fi XSS vulnerability

Open Bug Bounty ID: OBB-533594 Description| Value ---|--- Affected Website:| mstuonti.fi Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nibbledpencil.com XSS vulnerability

Open Bug Bounty ID: OBB-533590 Description| Value ---|--- Affected Website:| nibbledpencil.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bestgrassfedbeef.com XSS vulnerability

Open Bug Bounty ID: OBB-523136 Description| Value ---|--- Affected Website:| bestgrassfedbeef.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

PT-2017-11816

Name of the Vulnerable Software and Affected Versions FineCMS versions prior to 2017-07-12 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the folder, id, or name parameter in the /application/lib/ajax/get image.php API endpoint...

PT-2016-7863

Name of the Vulnerable Software and Affected Versions Tiki Wiki CMS versions 12.x through 12.9 LTS Tiki Wiki CMS versions 15.x through 15.2 LTS Tiki Wiki CMS versions 16.x through 16.0 Description The issue is related to the lack of input sanitization for the geo zoomlevel to found location...

i-Tech Nepal Radio CMS image.php parameters al_id SQL injection vulnerability

No description provided by source...

neomc.osuit.edu XSS vulnerability

Vulnerable URL: https://neomc.osuit.edu/campuscommunity/residentiallife/image.php?image=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

casde.unl.edu XSS vulnerability

Vulnerable URL: http://casde.unl.edu/history/counties/polk/osceola/image.php?image="'; Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 4 VI...

CVE-2015-6967: Undefined Security Weakness

Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in content/private/plugins/myimage/image.php...

PT-2015-7427

Name of the Vulnerable Software and Affected Versions Nibbleblog versions prior to 4.0.5 Description The issue allows remote administrators to execute arbitrary code by uploading a file with an executable extension to the My Image plugin, then accessing it via a direct request to the file in...

PT-2014-8735

Name of the Vulnerable Software and Affected Versions DukaPress plugin versions prior to 2.5.4 Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the dp img resize function. This is achieved by providing a .. dot dot in the src...

Tinymce Thumbnail Gallery <= 1.0.7 - download-image.php Local File Inclusion

The Tinymce Thumbnail Gallery WordPress plugin was affected by a download-image.php Local File Inclusion security vulnerability. PoC As seen in access logs: http://www.example.com/wp-content/plugins/tinymce-thumbnail-gallery/php/download-image.php?href=../../../../wp-config.php...

Lc Flickr Carousel 1.0 - Local File Disclosure Vulnerability

No description provided by source. Exploit Title: Lc Flickr Carousel V1.0 = Local File Disclosure Vulnerability Date: 11/07/2012 Author: GoLdM Vendor or Software Link: http://code.google.com/p/lcflickr/downloads/list Version: 1.0 Category:: Local File Disclosure Vulnerability2 Tested on: Xp SP 2 ...

PT-2013-4543

Name of the Vulnerable Software and Affected Versions LOCKON EC-CUBE versions prior to 2.12.5 Description A directory traversal issue exists in the lfCheckFileName function, allowing remote attackers to read arbitrary image files. This is achieved through vectors involving the image parameter to...