rcmart.com XSS vulnerability

Open Bug Bounty ID: OBB-93711 Description| Value ---|--- Affected Website:| rcmart.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

odel.lk XSS vulnerability

Vulnerable URL: http://www.odel.lk/store/advancedsearchresult?keyword=%22%3E%3Csvg/onload%3Dprompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 438138 Google...

bongkoch.com XSS vulnerability

Vulnerable URL: http://www.bongkoch.com/catalog/advancedsearchresult.php?keywords=asd"indescription=1subcat=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1279814 Google Pagerank...

epathchina.com XSS vulnerability

Vulnerable URL: http://www.epathchina.com/advancedsearchresult.php?keywords=asd%22%3E%3Csvg%20onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 295996...

esd.k12.ms.us XSS vulnerability

Vulnerable URL: http://www.esd.k12.ms.us/Default.asp?PN=AdvancedSearch=SearchNow Details: Description| Value ---|--- Patched:| Yes, at 27.07.2015 Latest check for patch:| 27.07.2015 20:58 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

cultizm.com XSS vulnerability

Vulnerable URL: https://www.cultizm.com/advancedsearchresult.php?XTCsid=462htlsunmilje0qjkf06rcs62=0=0=lol" Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 09:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

xe.gr XSS vulnerability

Open Bug Bounty ID: OBB-64315 Description| Value ---|--- Affected Website:| xe.gr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

eventjobscanada.com XSS vulnerability

Open Bug Bounty ID: OBB-64067 Description| Value ---|--- Affected Website:| eventjobscanada.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

Joomla ECommerce-WD Plugin 1.2.5 - SQL Injection Vulnerabilities

Exploit for php platform in category web applications Version 1.2.5 of the ECommerce-WD plugin for Joomla! has multiple unauthenticated SQL injections available via the advanced search functionality. http://extensions.joomla.org/extension/ecommerce-wd The vulnerable parameters are searchcategoryi...

Joomla! Component ECommerce-WD 1.2.5 - SQL Injection

Joomla! Component ECommerce-WD 1.2.5 - SQL Injection Version 1.2.5 of the ECommerce-WD plugin for Joomla! has multiple unauthenticated SQL injections available via the advanced search functionality. http://extensions.joomla.org/extension/ecommerce-wd The vulnerable parameters are searchcategoryid...

Joomla ECommerce-WD 1.2.5 SQL Injection

Version 1.2.5 of the ECommerce-WD plugin for Joomla! has multiple unauthenticated SQL injections available via the advanced search functionality. http://extensions.joomla.org/extension/ecommerce-wd The vulnerable parameters are searchcategoryid, sortorder, and filtermanufacturerids within the...

Joomla! Component ECommerce-WD 1.2.5 - SQL Injection

Version 1.2.5 of the ECommerce-WD plugin for Joomla! has multiple unauthenticated SQL injections available via the advanced search functionality. http://extensions.joomla.org/extension/ecommerce-wd The vulnerable parameters are searchcategoryid, sortorder, and filtermanufacturerids within the...

Splunk collect file Directory Traversal (CVE-2013-6771)

A directory traversal vulnerability has been found in Splunk. The vulnerability is due to insufficient sanitization of user-provided input to the advanced search functionality in the "file" parameter of the "collect" script...

Hotel / Resort Site Script with OnLine Reservation System

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Hotel / Resort Site Script with OnLine Reservation System SQLi Vulnerable Published: 2010-06-08 Vendor url:http://www.mformula.com.br Greetz to:Sid3^effects, aaNumb, M4n0j and to all ICW members...

T-Dreams Job Seekers Package 3.0 - SQL Injection

No description provided by source. Author: R4dc0re Exploit Title: T-Dreams Job Seekers Package SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link:http://t-dreams.com Category:WebApp Version:3.0 Price:279$ Contact: [email protected] Website: www.1337db.com Greetings to:...

Andiparos - Security tool that can be used for web application security assessments

Andiparos is a fork of the famous Paros Proxy. It is an open source web application security assessment tool that gives penetration testers the ability to spider websites, analyze content, intercept and modify requests, etc. The advantage of Andiparos is mainly the support of Client Certificates ...

Splunk runshellscript echo.sh Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Splunk. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the advanced search...

Splunk collect file Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Splunk. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the advanced search...

CVE-2012-6520

Multiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 allow remote attackers to execute arbitrary SQL commands via the 1 selectsort or 2 optsearchselect parameters. NOTE: this issue could not be reproduced by third parties...

CVE-2012-2099

Multiple cross-site scripting XSS vulnerabilities in Wikidforum 2.10 allow remote attackers to inject arbitrary web script or HTML via the 1 search field, or the 2 Author or 3 selectsort parameters in an advanced search...