PT-2017-19206

Name of the Vulnerable Software and Affected Versions WatuPRO plugin versions prior to 5.5.3.7 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the watupro questions parameter in a watupro submit action to the "/wp-admin/admin-ajax.ph...

Directory traversal

Directory traversal vulnerability in Zen Cart 1.5.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the act parameter to ajax.php...

CVE-2015-8352: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Zen Cart 1.5.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the act parameter to ajax.php...

PT-2017-7401

Name of the Vulnerable Software and Affected Versions Zen Cart version 1.5.4 Description A directory traversal issue allows remote attackers to include and execute arbitrary local files. This is achieved by using a .. dot dot in the act parameter to the "ajax.php" endpoint. Recommendations For Ze...

vortexmag.net XSS vulnerability

Open Bug Bounty ID: OBB-280206 Description| Value ---|--- Affected Website:| vortexmag.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mylefkada.gr XSS vulnerability

Open Bug Bounty ID: OBB-280205 Description| Value ---|--- Affected Website:| mylefkada.gr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

anorthosis24.net XSS vulnerability

Open Bug Bounty ID: OBB-280204 Description| Value ---|--- Affected Website:| anorthosis24.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

linuxundich.de XSS vulnerability

Open Bug Bounty ID: OBB-280170 Description| Value ---|--- Affected Website:| linuxundich.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

liman.az XSS vulnerability

Vulnerable URL: http://www.liman.az/wp-admin/admin-ajax.php?tdthemename=Newspaper=7.8 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 281602 VIP website status:| No Check liman.az S...

ivoirmixdj.com XSS vulnerability

Vulnerable URL: https://ivoirmixdj.com/wp-admin/admin-ajax.php?tdthemename=Newspaper=7.2 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 180640 VIP website status:| No Check...

fashionghana.com XSS vulnerability

Vulnerable URL: https://www.fashionghana.com/wp-admin/admin-ajax.php?tdthemename=Newspaper=8.1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 468765 VIP website status:| No Coordinated Disclosure Timeline:...

olisa.tv XSS vulnerability

Vulnerable URL: https://www.olisa.tv/wp-admin/admin-ajax.php?tdthemename=Newspaper=8.1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 104768 VIP website status:| No Coordinated Disclosure Timeline: Description|...

yavmode.ru XSS vulnerability

Open Bug Bounty ID: OBB-279801 Description| Value ---|--- Affected Website:| yavmode.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

talkchelsea.net XSS vulnerability

Open Bug Bounty ID: OBB-279752 Description| Value ---|--- Affected Website:| talkchelsea.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

posizionamento-seo.com XSS vulnerability

Open Bug Bounty ID: OBB-279744 Description| Value ---|--- Affected Website:| posizionamento-seo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tomatoheart.com XSS vulnerability

Open Bug Bounty ID: OBB-279735 Description| Value ---|--- Affected Website:| tomatoheart.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tvguru.cz XSS vulnerability

Vulnerable URL: http://www.tvguru.cz/wp-admin/admin-ajax.php?tdthemename=Newspaper=8.1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 233179 VIP website status:| No Coordinated Disclosure Timeline: Description|...

fokus.mk XSS vulnerability

Open Bug Bounty ID: OBB-278814 Description| Value ---|--- Affected Website:| fokus.mk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

elcaribe.com.do XSS vulnerability

Open Bug Bounty ID: OBB-278813 Description| Value ---|--- Affected Website:| elcaribe.com.do Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Sql injection

The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has SQL injection with these wp-admin/admin-ajax.php POST actions: catalogueupdateorder list-item, videoupdateorder video-item, imageupdateorder list-item, taggroupupdateorder listitem, categoryproductsupdateorder...