CVE-2017-7386

citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php model parameter...

CVE-2017-7386: Improper Neutralization of Input During Web Page Generation

citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php model parameter...

CVE-2017-7386

citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php model parameter...

PT-2017-17696

Name of the Vulnerable Software and Affected Versions citymont/symetrie version 0.9.6 Description The issue concerns a reflected XSS in the symetrie-master/app/commands/page.php file, specifically affecting the model parameter. Recommendations For citymont/symetrie version 0.9.6, consider...

PT-2017-17331

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 2.2.1 Description A cross-site scripting issue allows remote attackers to inject arbitrary JavaScript via the view type parameter in the "view filters page.php" file. Recommendations For versions prior to 2.2.1, upda...

PT-2017-17329

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.3.7 MantisBT versions 2.x prior to 2.2.1 Description A cross-site scripting issue allows remote attackers to inject arbitrary JavaScript via the action type parameter in the bug change status page.php file...

PT-2017-8711

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.2.19 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the return parameter in the manage custom field edit page.php file. Recommendations For Mantis...

gasparin.cz XSS vulnerability

Vulnerable URL: http://gasparin.cz/page.php?page=co2/products/gmotors/gmotors"=en Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12960412 VIP website status:| No Check gasparin.cz...

namaz.namaz.ir XSS vulnerability

Vulnerable URL: http://namaz.namaz.ir/page.php?cat=21=45";...

spectro.fr XSS vulnerability

Vulnerable URL: http://www.spectro.fr/pages/appc/contentmanager/page.php?ID=10025318=%3CSESSION%3E=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

ArtFrame CMS page.php parameters kid SQL injection vulnerability

No description provided by source...

ukvoices.co.uk XSS vulnerability

Vulnerable URL: http://www.ukvoices.co.uk/login-page.php?loginmsg=rk%22%3E%3Caudio%20src=x%20onerror=confirm%28%22XSSPOSED%22%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

PT-2015-5033

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.2.0a3 through 1.2.18 Description The issue arises from an incorrect regular expression used in the string sanitize url function, allowing remote attackers to conduct open redirect and phishing attacks. This can be achieved ...

PT-2015-4283

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.19 MantisBT versions 1.3.x prior to 1.3.0-beta.2 Description The issue allows remote administrators with FILE privileges to execute arbitrary SQL commands. This is achieved via the MANTIS MANAGE USERS COOKIE cook...

PT-2014-8983

Name of the Vulnerable Software and Affected Versions PictoBrowser plugin versions 0.3.1 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks. This is...

CVE-2014-8307

Multiple cross-site scripting XSS vulnerabilities in skins/default/outline.tpl in C97net Cart Engine before 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 path parameter in the "drop down TOP menu with path" section or 2 printthispage variable in the footercontentbloc...

Open redirect

Open redirect vulnerability in the redir function in includes/function.php in C97net Cart Engine before 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header to 1 index.php, 2 cart.php, 3 msg.php, or 4 page.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in skins/default/outline.tpl in C97net Cart Engine before 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 path parameter in the "drop down TOP menu with path" section or 2 printthispage variable in the footercontentbloc...

PT-2014-6328

Name of the Vulnerable Software and Affected Versions Lead Octopus plugin for WordPress affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the lib/optin/optin page.php file. This can lead to unauthorized access a...

Foundry CMS Multiple Vulnerability

Title: Foundry CMS Multiple Vulnerability + Date: 2014/07/20 + Author: Hekt0r + Vendor Homepage: www.design-foundry.co.uk + Tested on: Windows 7 & Kali Linux + Vulnerable Files: /page.php + Dork : intext:"Site by The Design Foundry" + Title: Foundry CMS Multiple Vulnerability + Date: 2014/07/20 +...