CVE-2018-9328

CVE-2018-9328 affects PHP Scripts Mall Redbus Clone Script 3.0.6, with reflected XSS through the ter_from or tag parameter to results.php. The root cause is an input handling flaw that allows arbitrary HTML/JS injection via these parameters. No exploits or patch details are provided in the connec...

CVE-2018-9328

PHP Scripts Mall Redbus Clone Script 3.0.6 has XSS via the terfrom or tag parameter to results.php...

CVE-2018-9328: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Redbus Clone Script 3.0.6 has XSS via the terfrom or tag parameter to results.php...

PT-2018-18985

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Redbus Clone Script version 3.0.6 Description The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the ter from or tag parameter in the "results.php" endpoint...

coinpage.com XSS vulnerability

Open Bug Bounty ID: OBB-594256 Description| Value ---|--- Affected Website:| coinpage.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

route649.com XSS vulnerability

Open Bug Bounty ID: OBB-580382 Description| Value ---|--- Affected Website:| route649.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

collecta.fr XSS vulnerability

Open Bug Bounty ID: OBB-568004 Description| Value ---|--- Affected Website:| collecta.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

raybornefilms.com XSS vulnerability

Open Bug Bounty ID: OBB-563538 Description| Value ---|--- Affected Website:| raybornefilms.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2017-15033

Name of the Vulnerable Software and Affected Versions Bus Booking Script affected versions not specified Description The issue concerns an XSS vulnerability. It can be exploited via the datepicker parameter in the "results.php" endpoint or the spemail parameter in the "admin/new master.php"...

CVE-2017-17828: Improper Neutralization of Input During Web Page Generation

Bus Booking Script has XSS via the results.php datepicker parameter or the admin/newmaster.php spemail parameter...

aboutsoniasotomayor.com XSS vulnerability

Open Bug Bounty ID: OBB-454944 Description| Value ---|--- Affected Website:| aboutsoniasotomayor.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

CVE-2017-17603

Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, projtype, searchtext, sellprice, or maxprice parameter...

CVE-2017-17603

Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, projtype, searchtext, sellprice, or maxprice parameter...

Sql injection

Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, projtype, searchtext, sellprice, or maxprice parameter...

CVE-2017-17603

Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, projtype, searchtext, sellprice, or maxprice parameter...

CVE-2017-17603

CVE-2017-17603 affects Advanced Real Estate Script 4.0.7 (PHP/MySQL). The vulnerability is an SQL Injection in search-results.php exploitable via parameters projectmain, proj_type, searchtext, sell_price, or maxprice. According to NVD, CVSSv2/3 indicate high to critical impact (Base Scores 7.5/9....

CVE-2017-17603: Improper Neutralization of Special Elements used in an SQL Command

Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, projtype, searchtext, sellprice, or maxprice parameter...

PT-2017-14899

Name of the Vulnerable Software and Affected Versions Advanced Real Estate Script version 4.0.7 Description The issue concerns a SQL Injection problem. It affects the search-results.php file through the Projectmain, proj type, searchtext, sell price, or maxprice parameters. Recommendations For...

saeedbro.com XSS vulnerability

Open Bug Bounty ID: OBB-451372 Description| Value ---|--- Affected Website:| saeedbro.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

dansofbiglake.com XSS vulnerability

Vulnerable URL: http://www.dansofbiglake.com/results.php?category=13'"3/4 Ton Pickups Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6980442 VIP website status:| No Coordinated...