67 matches found
mackenziehealth.ca XSS vulnerability
Vulnerable URL: http://mackenziehealth.ca/searchresult.php Details: Description| Value ---|--- Patched:| Yes, at 27.09.2016 Latest check for patch:| 27.09.2016 13:10 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 971419 Google Pagerank| 4 VIP website status:| N...
jackd.info XSS vulnerability
Vulnerable URL: http://www.jackd.info/searchresult.php?search=%3C%2Fscript%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
bingobonus.codes XSS vulnerability
Vulnerable URL: http://bingobonus.codes/searchresult.php?search=%3C%2Fscript%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
kent32.com XSS vulnerability
Open Bug Bounty ID: OBB-84257 Description| Value ---|--- Affected Website:| kent32.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
eproc.dor.gov.np XSS vulnerability
Open Bug Bounty ID: OBB-68635 Description| Value ---|--- Affected Website:| eproc.dor.gov.np Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
astig-radio.com XSS vulnerability
Open Bug Bounty ID: OBB-47496 Description| Value ---|--- Affected Website:| astig-radio.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
phpYellowTM 5.33 search_result.php haystack Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15700/info phpYellowTM is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
CVE-2012-6644
Multiple cross-site scripting XSS vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to channels.php, 2 collections.php, 3 groups.php, or 4 videos.php; 5 query parameter to searchresult.php; or 6 type parameter to...
Canoy Softwares (search_result.php?loc_id) Remote SQL injection Vulnerability
IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Canoy Softwares searchresult.php?locid AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://canoysoft.in/ Persian Gulf 4 Ever! Dork : "Powered by Canoy Softwares"...
WOC Consulting (search_result.php?cid) Remote SQL injection Vulnerability
IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability WOC Consulting searchresult.php?cid AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.woc-consulting.com/ Persian Gulf 4 Ever! Dork : "Powered by WOC Consulting Canada"...
Zones Web Solution (status.asp?print) (search_result.php?loc_id) Remote SQL injection Vulnerabilities
IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerabilities Zones Web Solution status.asp?print searchresult.php?locid AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.zones.in/ Persian Gulf 4 Ever! Dork : "Powered by Zones Web...
Avon Groups SQL Injection
IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Avon Groups searchresult.php?cid AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.avongroups.in/it/ Persian Gulf 4 Ever! Dork : "Powered By: Avon Enterprises Pvt. Ltd. "...
Canoy Softwares SQL Injection
IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Canoy Softwares searchresult.php?locid AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://canoysoft.in/ Persian Gulf 4 Ever! Dork : "Powered by Canoy Softwares"...
Unfixed XSS vulnerability at www.habername.com
Security researcher x3j46, has submitted on 14/09/2008 a cross-site-scripting XSS vulnerability affecting www.habername.com, which at the time of submission ranked 413985 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2008. It is current...
Unfixed XSS vulnerability at www.adanamedya.com
Security researcher x3j46, has submitted on 14/09/2008 a cross-site-scripting XSS vulnerability affecting www.adanamedya.com, which at the time of submission ranked 479195 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/09/2008. It is...
Unfixed XSS vulnerability at www.haber3.com
Security researcher x3j46, has submitted on 14/09/2008 a cross-site-scripting XSS vulnerability affecting www.haber3.com, which at the time of submission ranked 5722 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2008. It is currently...
CVE-2008-2087: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in searchresult.php in Softbiz Web Host Directory Script, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the hostid parameter, a different vector than CVE-2005-3817...
Softbiz Web Host Directory Script - 'host_id' SQL Injection
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV89$2008 ----------------------------------------------------------------------------------------- ECHOADV89$2008 Softbiz Web Host Directory Script searchresult.php hostid Blind Sql Injection Vulnerability...
Unfixed XSS vulnerability at www.findmysoft.com
Security researcher CCC, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting www.findmysoft.com, which at the time of submission ranked 57622 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2007. It is currently...
CVE-2007-4077: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 msg, 2 page, 3 viewkey, or 4 viewtype parameter to a viewvideo.php; the 5 next parameter to b signup.php; the 6 searchid parameter to c...