1452 matches found
CaseAware Cross Site Scripting
Exploit Title: CaseAware Cross Site Scripting Vulnerability Date: 20th May 2017 Exploit Author: justpentest Vendor Homepage: https://caseaware.com/ Version: All the versions Contact: [email protected] CVE : 2017-5631 Source:...
CVE-2016-10329
Command injection vulnerability in login.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to execute arbitrary code via shell metacharacters in the crafted 'X-Forwarded-For' header...
CVE-2016-10329
Affected product: Synology Photo Station (prior to version 6.5.3-3226). Vulnerability: Command injection in login.php that allows remote attackers to execute arbitrary code through shell metacharacters in a crafted X-Forwarded-For header. Impact: Remote code execution with high risk (as noted by ...
Cross site scripting
An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter i.e., "usr" that is transmitted in the login.php query string...
CVE-2017-5631
An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter i.e., "usr" that is transmitted in the login.php query string...
CVE-2016-10322
Synology Photo Station before 6.3-2958 allows remote authenticated guest users to execute arbitrary commands via shell metacharacters in the X-Forwarded-For HTTP header to photo/login.php...
ciao.de XSS vulnerability
Vulnerable URL: https://www.ciao.de/login.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 34306 VIP website status:| Yes Check ciao.de SSL connection:| Grade: A Coordinated...
yelites.org XSS vulnerability
Vulnerable URL: http://www.yelites.org/web/login.php?err=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3059223 VIP website status:| No Check yelites.org SSL connection:| Grade: ...
hckrs.ir XSS vulnerability
Vulnerable URL: http://hckrs.ir/login.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3771032 VIP website status:| No Check hckrs.ir SSL connection:| Grade: F Coordinated...
jaipurad.com XSS vulnerability
Vulnerable URL: http://www.jaipurad.com/login.php?msg=%22%22/%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E=internal.php Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
dailypioneer.com XSS vulnerability
Vulnerable URL: http://www.dailypioneer.com/cms/login.php?msg=OPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 52961 VIP website status:| No Check dailypioneer.com SSL...
pilotschedule.com XSS vulnerability
Vulnerable URL: http://www.pilotschedule.com/login.php?msg=...
edu.mapf.ir XSS vulnerability
Vulnerable URL: http://edu.mapf.ir/login.php?redirect=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check edu.mapf.ir SSL connection:| Grade: F Coordinated...
roshdportal.beenj.com XSS vulnerability
Vulnerable URL: http://roshdportal.beenj.com/login.php?redirect=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...
gooyeshz.ir XSS vulnerability
Vulnerable URL: http://gooyeshz.ir/grades/login.php?redirect=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3056720 VIP website status:| No Check gooyeshz.ir SSL connection:| Grade: F Coordinated Disclosure...
reg.mtamini.ir XSS vulnerability
Vulnerable URL: http://reg.mtamini.ir/login.php?redirect=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check reg.mtamini.ir SSL...
publicdomainvectors.org XSS vulnerability
Vulnerable URL: http://publicdomainvectors.org/photocms/login.php?language=...
mail-viclarity.com XSS vulnerability
Vulnerable URL: https://mail-viclarity.com/login.php?message=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Che...
fr.pure360.com XSS vulnerability
Vulnerable URL: https://fr.pure360.com/login.php?message=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:03 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
