FineCMS Cross-Site Scripting Vulnerability (CNVD-2017-10156)

FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. A cross-site scripting vulnerability exists in the sitename parameter in the admin.php script of FineCMS 2017-05-28 and earlier versions. An attacker can exploit this vulnerability to inject...

sudo security update

1.8.6p3-28 - Fixes CVE-2017-1000367 Resolves: rhbz1455399...

CVE-2017-9252

andrzuk/FineCMS through 2017-05-28 is vulnerable to a reflected XSS in the search page via the text-search parameter to index.php in a route=search action...

Cross site scripting

andrzuk/FineCMS through 2017-05-28 is vulnerable to a reflected XSS in the sitename parameter to admin.php...

CVE-2017-9251

FineCMS prior to 2017-05-28 is vulnerable to a reflected XSS in the sitename parameter of admin.php. The vulnerability is confirmed across multiple sources; the root cause is unsanitized input reflected in the sitename field. Impact is XSS (arbitrary script/HTML execution) in affected pages. Expl...

PT-2017-18808 · Andrzuk · Finecms

Name of the Vulnerable Software and Affected Versions: andrzuk/FineCMS versions prior to 2017-05-28 Description: The issue is related to a reflected XSS in the search page. This occurs via the text-search parameter to "index.php" in a "route=search" action. Recommendations: For versions prior to...

vii.guildlaunch.com XSS vulnerability

Vulnerable URL: http://vii.guildlaunch.com/recruiting/login.php?destination=test%22%27--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

architegn.dk XSS vulnerability

Vulnerable URL: http://architegn.dk/search.asp?searchfield=CEBRA%22%27--!%3E%3CScript%20/K/%3EconfirmOPENBUGBOUNTY%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

rentolease.co.uk XSS vulnerability

Vulnerable URL: http://www.rentolease.co.uk/BlogView.asp?SearchPhrase=BUY+TO+LET+ARLA+2014+Ayrshire+property+market%22%27--!%3E%3CScript%20/K/%3Econfirm%22OPENBUGBOUNTY%22%3C/Script%20/K/%3E==123074==6 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...

phpMyAdmin 4.6.x < 4.6.3 Multiple Vulnerabilities (PMASA-2016-17 - PMASA-2016-28)

According to its self-reported version number, the phpMyAdmin application hosted on the remote web server is 4.6.x prior to 4.6.3. It is, therefore, affected by the following vulnerabilities: - A flaw exists in the setup/frames/index.inc.php script that allows an unauthenticated, remote attacker ...

WordPress Car Rental System 2.5 Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Car Rental System v2.5 Date: 28/03/2017 Exploit Author: TAD GROUP Vendor Homepage: https://www.bestsoftinc.com/ Software Link: https://www.bestsoftinc.com/car-rental-system.html Version: 2.5 Contact: email protected Website:...

Ubuntu Linux kernel package integer overflow vulnerability

Ubuntu is a desktop-oriented GNU/Linux operating system developed by Canonical and the Ubuntu Foundation, of which the Linux kernel package is a component. An integer overflow vulnerability exists in version 3.16.0-28 of the Linux kernel package on the Ubuntu 14.04 LTS release. Due to the program...

HelpMeWatchWho Cross-Site Scripting Vulnerability

HelpMeWatchWho is a set of websites that provide up-to-date information on Doctor Who. The site offers previews of new episodes, as well as links to watch the show online, among other features. A cross-site scripting vulnerability exists in the HelpMeWatchWho-master/unaired.php file in versions o...

Microsoft Office - OLE Multiple DLL Side Loading Vulnerabilities (MS15-132/MS16-014/MS16-025/MS16-04

Exploit for windows platform in category local exploits require 'zip' require 'base64' require 'msf/core' require 'rex/ole' class MetasploitModule 'Office OLE Multiple DLL Side Loading Vulnerabilities', 'Description' = %q Multiple DLL side loading vulnerabilities were found in various COM...

Synchronet BBS 3.16c - Denial of Service

Synchronet BBS 3.16c - Denial of Service Exploit Title: Synchronet BBS 3.16c for Windows – Multiple vulnerabilities Date: 2017-02-28 Exploit Author: Peter Baris Vendor Homepage: http://www.saptech-erp.com.au Software Link: ftp://synchro.net/Synchronet/sbbs316c.zip Version: 3.16c for Windows Teste...

ontariorvda.ca XSS vulnerability

Vulnerable URL: http://www.ontariorvda.ca/wp-content/plugins/shadowbox-js/shadowbox/player.swf?debug=alert%27openbugbounty%27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10857868 VIP website status:| No Check...

manutti.com XSS vulnerability

Vulnerable URL:...

mailtribune.com XSS vulnerability

Open Bug Bounty ID: OBB-209566 Description| Value ---|--- Affected Website:| mailtribune.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

kutupayisi.com XSS vulnerability

Vulnerable URL: http://www.kutupayisi.com/index.php?do=catalog/results=%3C/script%3E%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 14:32 GMT Vulnerability type:| XSS Vulnerability status:...

com4.cc Open Redirect vulnerability

Vulnerable URL: http://www.com4.cc/site.php?url=aHR0cDovL3d3dy5vcGVuYnVnYm91bnR5Lm9yZw== Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:57 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 1171915...