323 matches found
ninalieven.net XSS vulnerability
Open Bug Bounty ID: OBB-613651 Description| Value ---|--- Affected Website:| ninalieven.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
fertigreen.nl XSS vulnerability
Open Bug Bounty ID: OBB-605979 Description| Value ---|--- Affected Website:| fertigreen.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-6576
SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter...
Sql injection
SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter...
CVE-2018-6576
SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter...
CVE-2018-6576: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter...
PT-2018-17640
Name of the Vulnerable Software and Affected Versions Event Manager version 1.0 Description A SQL Injection issue exists, allowing potential exploitation via the id parameter in the "event.php" endpoint or the slug parameter in the "page.php" endpoint. Recommendations For Event Manager version 1....
PT-2018-17614
Name of the Vulnerable Software and Affected Versions MantisBT version 2.10.0-development before 2018-02-02 Description The issue allows remote attackers to discover the full path via an invalid filter parameter. This is related to a filter ensure valid filter call in current user api.php. The...
PT-2017-14969
Name of the Vulnerable Software and Affected Versions wp-concours plugin versions prior to 1.1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the result message parameter to "includes/concours page.php". Recommendations For wp-concours...
PT-2017-14987
Name of the Vulnerable Software and Affected Versions esb-csv-import-export plugin versions through 1.1 for WordPress Description The issue allows remote attackers to inject arbitrary web script or HTML via the cie type, cie import, cie update, or cie ignore parameter to the...
CVE-2014-8492: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in assets/misc/fallback-page.php in the Profile Builder plugin before 2.0.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 sitename, 2 message, or 3 siteurl parameter...
PT-2017-6241
Name of the Vulnerable Software and Affected Versions Profile Builder plugin versions prior to 2.0.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via the site name, message, or site url parameters in the assets/misc/fallback-page.php file. Recommendations F...
CVE-2015-7517: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in the Double Opt-In for Download plugin before 2.0.9 for WordPress allow remote attackers to execute arbitrary SQL commands via the ver parameter to 1 class-doifd-download.php or 2 class-doifd-landing-page.php in public/includes/...
PT-2017-7210
Name of the Vulnerable Software and Affected Versions Double Opt-In for Download plugin versions prior to 2.0.9 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ver parameter to specific API endpoints, including class-doifd-download.php and...
PT-2017-6390
Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.19 MantisBT versions 1.3.x prior to 1.3.0-beta.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the url parameter to "permalink page.php"...
PT-2017-12328
Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 2.5.2 Description A security issue was found that allows remote attackers to execute arbitrary JavaScript code. This occurs because the filter field in the manage user page.php file is not properly sanitized before...
puntoeacapo.net XSS vulnerability
Vulnerable URL: http://www.puntoeacapo.net/page.php?url=alert'OPENBUGBOUNTY'...
PT-2017-17848
Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.3.11 MantisBT versions 2.x prior to 2.3.3 MantisBT versions 2.4.x prior to 2.4.1 Description The issue arises from the omission of a backslash check in string api.php, leading to conflicting interpretations of an...
vergelegen.co.za XSS vulnerability
Vulnerable URL: http://www.vergelegen.co.za/Alpha/Page.php?SearchString="--!"=xImageID=1140000000== Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2480466 VIP website status:| No...