CVE-2018-17552

SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigate-user cookie...

CVE-2018-17552: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigate-user cookie...

PT-2018-14051

Name of the Vulnerable Software and Affected Versions Naviwebs Navigate CMS version 2.8 Description The issue allows remote attackers to bypass authentication. This is achieved via the navigate-user cookie in the login.php file. Recommendations For Naviwebs Navigate CMS version 2.8, update the...

btucson.com XSS vulnerability

Open Bug Bounty ID: OBB-680711 Description| Value ---|--- Affected Website:| btucson.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dus-rohr.de XSS vulnerability

Open Bug Bounty ID: OBB-672726 Description| Value ---|--- Affected Website:| dus-rohr.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

media-products.de XSS vulnerability

Open Bug Bounty ID: OBB-669897 Description| Value ---|--- Affected Website:| media-products.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pro-auto.ro XSS vulnerability

Open Bug Bounty ID: OBB-655837 Description| Value ---|--- Affected Website:| pro-auto.ro Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

paratuberculosis.net XSS vulnerability

Open Bug Bounty ID: OBB-643892 Description| Value ---|--- Affected Website:| paratuberculosis.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

obitron.de XSS vulnerability

Open Bug Bounty ID: OBB-636699 Description| Value ---|--- Affected Website:| obitron.de Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:...

manttus.com XSS vulnerability

Open Bug Bounty ID: OBB-635414 Description| Value ---|--- Affected Website:| manttus.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sei.cijun.sp.gov.br XSS vulnerability

Open Bug Bounty ID: OBB-633953 Description| Value ---|--- Affected Website:| sei.cijun.sp.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

control.energypk.ru XSS vulnerability

Open Bug Bounty ID: OBB-633391 Description| Value ---|--- Affected Website:| control.energypk.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

resonanceguild.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-632562 Description| Value ---|--- Affected Website:| resonanceguild.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ssip.dnpm.gov.br XSS vulnerability

Open Bug Bounty ID: OBB-632038 Description| Value ---|--- Affected Website:| ssip.dnpm.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Design/Logic Flaw

SGIN.CN xiangyun platform V9.4.10 has XSS via the loginurl parameter to /login.php...

CVE-2018-11553

SGIN.CN xiangyun platform V9.4.10 has XSS via the loginurl parameter to /login.php...

CVE-2018-11553: Improper Neutralization of Input During Web Page Generation

SGIN.CN xiangyun platform V9.4.10 has XSS via the loginurl parameter to /login.php...

PT-2018-10661

Name of the Vulnerable Software and Affected Versions SGIN.CN xiangyun platform version 9.4.10 Description The issue is related to a security problem where an attacker can inject malicious code. The estimated number of potentially affected devices worldwide is not available. There is no informati...

vincentvangoghcafe.com XSS vulnerability

Open Bug Bounty ID: OBB-618426 Description| Value ---|--- Affected Website:| vincentvangoghcafe.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

obitron.de XSS vulnerability

Open Bug Bounty ID: OBB-610334 Description| Value ---|--- Affected Website:| obitron.de Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:...