Confluence 6.0.x Information Disclosure Vulnerability

The Confluence drafts diff rest resource made the current content of all blogs and pages in Confluence available without authentication. Attackers who can access the Confluence web interface of a vulnerable version can use this vulnerability to obtain the content of all blogs and pages inside...

anoox.com XSS vulnerability

Vulnerable URL: https://www.anoox.com/news/viewblogs.php?nickname="'--!confirmOPENBUGBOUNTY...

UBUNTU-CVE-2017-6446

XSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the sortby and order parameters...

gq.ru XSS vulnerability

Vulnerable URL: http://www.gq.ru/blogs/revizor/?PAGEN2=2'...

douthat.blogs.nytimes.com XSS vulnerability

Vulnerable URL: http://douthat.blogs.nytimes.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

atwar.blogs.nytimes.com XSS vulnerability

Vulnerable URL: http://atwar.blogs.nytimes.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

india.blogs.nytimes.com XSS vulnerability

Vulnerable URL: http://india.blogs.nytimes.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

blogs.partner.microsoft.com XSS vulnerability

Vulnerable URL: https://blogs.partner.microsoft.com/mpn/tag/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 13.06.2016 Latest check for patch:| 13.06.2016 15:16 GMT Vulnerability type:| XSS Vulnerability...

blogs.canterbury.ac.uk XSS vulnerability

Open Bug Bounty ID: OBB-152035 Description| Value ---|--- Affected Website:| blogs.canterbury.ac.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

blogs.business.microsoft.com XSS vulnerability

Vulnerable URL: https://blogs.business.microsoft.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 02.06.2016 Latest check for patch:| 02.06.2016 22:58 GMT Vulnerability type:| XSS Vulnerability status:|...

blogs.cdc.gov XSS vulnerability

Vulnerable URL: http://blogs.cdc.gov/publichealthmatters/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Lithium Social CRM Cross Site Scripting

Exploit Title: XSS Cross Site Scripting in Social CRM & Community Solutions powered by Lithium in Knowledge base section Discovery Date: 2016/02/19 Public Disclosure Date: 2016/03/24 Exploit Author: Imran Khan Contact: netizen01k at gmail.com Vendor link: http://www.lithium.com/ Tested on: Firefo...

blogs.bing.com XSS vulnerability

Vulnerable URL: https://blogs.bing.com/webmaster/?searchtext=...

Cross-Site Scripting Vulnerability in DotCMS Blog Search Page

DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A cross-site scripting vulnerability exists in DotCMS version 3.3, which originates from the blogs/ page in the...

marca.com XSS vulnerability

Vulnerable URL: http://www.marca.com/blogs/real-madridalert/XSSPOSED/...

blogs.nasa.gov XSS vulnerability

Vulnerable URL: https://blogs.nasa.gov/site-search/"" == x/ Details: Description| Value ---|--- Patched:| Yes, at 25.11.2015 Latest check for patch:| 25.11.2015 16:12 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 6 VIP...

b2evolution 'filemanager' cross-site scripting vulnerability

b2evolution is a PHP and MySQL based blogging software developed by software developer Francois Planque. A cross-site scripting vulnerability exists in b2evolution 'filemanager'. The blogs/admin.php script fails to adequately filter the 'fmfilter' parameter. A remote attacker can exploit the...

MyBB Profile Blogs Plugin SQL Injection

An SQL injection vulnerability has been reported in MyBB Profile Blogs Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

WPScan Vulnerability Database WordPress Security Resource

WordPress’ popularity as a content management system 44 percent of CMS market share is matched in parallel by the number of security vulnerabilities afflicting the open source platform, as well as its versatile plug-ins and themes. It’s not unlikely that a developer may be at a loss as to the...

MyBB Profile Blogs Plugin 1.2 - Multiple Vulnerabilities

No description provided by source. Exploit Title: MyBB Profile Blog plugin multiple vulnerabilities. Google Dork: inurl:member.php intext:Profile Blogs for MyBB Date: 12.9.2012 Exploit Author: Zixem Vendor Homepage: http://fklar.pl/ Software Link: http://mods.mybb.com/view/profile-blogs Version:...