Atlassian Confluence 6.0.x < 6.0.7 Drafts diff REST Information Disclosure

According to its self-reported version number, the Atlassian Confluence application running on the remote host is 6.0.x prior to 6.0.7. It is, therefore, affected by an information disclosure vulnerability in the Confluence drafts diff REST resource due to making available the page IDs or draft I...

Atlassian Confluence Authentication Bypass Vulnerability

Atlassian Confluence is a professional enterprise knowledge management and collaboration software from Atlassian Australia, which can also be used to build an enterprise WiKi. the software enables collaboration and knowledge sharing between team members. Atlassian Confluence suffers from an...

CVE-2017-7415

Atlassian Confluence 6.x before 6.0.7 allows remote attackers to bypass authentication and read any blog or page via the drafts diff REST resource...

Confluence 6.0.x Information Disclosure Vulnerability

The Confluence drafts diff rest resource made the current content of all blogs and pages in Confluence available without authentication. Attackers who can access the Confluence web interface of a vulnerable version can use this vulnerability to obtain the content of all blogs and pages inside...

anoox.com XSS vulnerability

Vulnerable URL: https://www.anoox.com/news/viewblogs.php?nickname="'--!confirmOPENBUGBOUNTY...

UBUNTU-CVE-2017-6446

XSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the sortby and order parameters...

gq.ru XSS vulnerability

Vulnerable URL: http://www.gq.ru/blogs/revizor/?PAGEN2=2'...

douthat.blogs.nytimes.com XSS vulnerability

Vulnerable URL: http://douthat.blogs.nytimes.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

atwar.blogs.nytimes.com XSS vulnerability

Vulnerable URL: http://atwar.blogs.nytimes.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

india.blogs.nytimes.com XSS vulnerability

Vulnerable URL: http://india.blogs.nytimes.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

blogs.partner.microsoft.com XSS vulnerability

Vulnerable URL: https://blogs.partner.microsoft.com/mpn/tag/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 13.06.2016 Latest check for patch:| 13.06.2016 15:16 GMT Vulnerability type:| XSS Vulnerability...

blogs.canterbury.ac.uk XSS vulnerability

Open Bug Bounty ID: OBB-152035 Description| Value ---|--- Affected Website:| blogs.canterbury.ac.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

blogs.business.microsoft.com XSS vulnerability

Vulnerable URL: https://blogs.business.microsoft.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 02.06.2016 Latest check for patch:| 02.06.2016 22:58 GMT Vulnerability type:| XSS Vulnerability status:|...

blogs.cdc.gov XSS vulnerability

Vulnerable URL: http://blogs.cdc.gov/publichealthmatters/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Lithium Social CRM Cross Site Scripting

Exploit Title: XSS Cross Site Scripting in Social CRM & Community Solutions powered by Lithium in Knowledge base section Discovery Date: 2016/02/19 Public Disclosure Date: 2016/03/24 Exploit Author: Imran Khan Contact: netizen01k at gmail.com Vendor link: http://www.lithium.com/ Tested on: Firefo...

blogs.bing.com XSS vulnerability

Vulnerable URL: https://blogs.bing.com/webmaster/?searchtext=...

Cross-Site Scripting Vulnerability in DotCMS Blog Search Page

DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A cross-site scripting vulnerability exists in DotCMS version 3.3, which originates from the blogs/ page in the...

marca.com XSS vulnerability

Vulnerable URL: http://www.marca.com/blogs/real-madridalert/XSSPOSED/...

blogs.nasa.gov XSS vulnerability

Vulnerable URL: https://blogs.nasa.gov/site-search/"" == x/ Details: Description| Value ---|--- Patched:| Yes, at 25.11.2015 Latest check for patch:| 25.11.2015 16:12 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 6 VIP...

b2evolution 'filemanager' cross-site scripting vulnerability

b2evolution is a PHP and MySQL based blogging software developed by software developer Francois Planque. A cross-site scripting vulnerability exists in b2evolution 'filemanager'. The blogs/admin.php script fails to adequately filter the 'fmfilter' parameter. A remote attacker can exploit the...