callens-fg.be XSS vulnerability

Open Bug Bounty ID: OBB-284037 Description| Value ---|--- Affected Website:| callens-fg.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-9609

Cross-site scripting XSS vulnerability in Blackcat CMS 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the maplanguage parameter to backend/pages/langsettings.php...

PT-2017-19068

Name of the Vulnerable Software and Affected Versions Blackcat CMS version 1.2 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the map language parameter to "backend/pages/lang settings.php". Recommendations For Blackcat CM...

Tiki Wiki CMS Groupware Cross-Site Scripting Vulnerability (CNVD-2017-16010)

Tiki Wiki CMS Groupware is a suite of open source content management and portal applications from the Tiki software community that can be used to create web applications, portals, corporate intranets, extranets, and more. A cross-site scripting vulnerability exists in the TikiFilter.php file in...

lang-ag.com XSS vulnerability

Vulnerable URL: https://www.lang-ag.com/en/suche.html?txindexedsearchsword=%22%3E%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FXSSPOSED%2F%3EindexedsearchfreeIndexUid=indexedsearchpointer=0 Details: Description| Value ---|--- Patched:| Yes, at 11.07.2017 Latest check for patch:| 11.07.2017 06:...

Cross site scripting

TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS...

CVE-2017-9145

TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS...

CVE-2017-9145

TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS...

PT-2017-18727

Name of the Vulnerable Software and Affected Versions Tiki Wiki CMS Groupware versions 12.x through 16.x Description The issue is related to improper validation of the imgsize or lang parameter in TikiFilter.php, which can lead to XSS. Recommendations For versions 12.x through 16.x, update the...

CVE-2017-9145: Improper Neutralization of Input During Web Page Generation

TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS...

CVE-2017-9621: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in modules/Base/Lang/Administrator/updatetranslation.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 original or 2 new parameter...

Sql injection

Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...

CVE-2017-7886

Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...

CVE-2017-7886

Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...

CVE-2017-7886

Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...

CVE-2017-7886

Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...

CVE-2017-7886

Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...

PT-2017-17973 · Dolibarr · Dolibarr Erp/Crm

Name of the Vulnerable Software and Affected Versions: Dolibarr ERP/CRM version 4.0.4 Description: The issue is related to SQL Injection in the doli/theme/eldy/style.css.php file via the lang parameter. Recommendations: For version 4.0.4, avoid using the lang parameter in the affected file until...

CVE-2017-7886: Improper Neutralization of Special Elements used in an SQL Command

Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...

PT-2017-17100

Name of the Vulnerable Software and Affected Versions ATutor version 2.2.2 Description Multiple Cross-Site Scripting issues were discovered due to insufficient filtration of user-supplied data. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...