20626 matches found
autoaffaristore.com XSS vulnerability
Vulnerable URL: http://autoaffaristore.com/vendita-auto-usate-risultato-ricerca.php?orderby=qualitadirection=1/-///'/"//--...
thismatters.net XSS vulnerability
Vulnerable URL: http://thismatters.net/hobbies/lonestar/capview.php?cap=1/-///'/"//--...
xtrose.com XSS vulnerability
Vulnerable URL: http://www.xtrose.com/index.php?dis=1=iga=14=1/-///'/"//--...
membrillejo.com XSS vulnerability
Vulnerable URL: http://www.membrillejo.com/js/default.asp?wings=1/-///'/"//--...
alabamapoets.org XSS vulnerability
Vulnerable URL: http://alabamapoets.org/winners.php?winnerid=1/-///'/"//--...
butlereagle.com XSS vulnerability
Vulnerable URL: http://www.butlereagle.com/apps/pbcs.dll/cce?Site=BE=1=11==11=10=00000000=99999999=0=Title==20141001=20141031=1=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
technopolis.sut.ac.th XSS vulnerability
Vulnerable URL: http://technopolis.sut.ac.th/index.php?page=RsvRoom/show=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 15:10 GMT Vulnerability type:| XSS Vulnerability...
yivoarchives.org XSS vulnerability
Vulnerable URL: http://www.yivoarchives.org/index.php?p=core/contact=email=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...
woodstock-nissan.ca XSS vulnerability
Open Bug Bounty ID: OBB-252159 Description| Value ---|--- Affected Website:| woodstock-nissan.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
mcphillipsnissan.com XSS vulnerability
Vulnerable URL: http://mcphillipsnissan.com/emailafriend.php?share=%22%3Etrolo%3Ci%3Etralala%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 15:09 GMT Vulnerability type:| XSS Vulnerability...
HackerOne: Adding or removing a new non-preferred payout method does not trigger an e-mail or account notification
While we previously sent an e-mail to the user when their preferred payout method was modified, we did not send a notification when adding or removing a new non-preferred payout method. This oversight was pointed out by this report...
Weblate: No filteration of null characters in name field
Hello, Description: The account settings page, https://demo.weblate.org/accounts/profile/account, allows a user to set their username as a null character! A user intercepts the request using a proxy and changes the user name field to %00. Mitigation: I recommend you have filtering of null...
heartlandscornwall.com XSS vulnerability
Vulnerable URL: http://www.heartlandscornwall.com/events.php?interest=2"alert"OPENBUGBOUNTY"...
rabota.nur.kz XSS vulnerability
On the 23.06.2017 security researcher reported a XSS vulnerability affecting the rabota.nur.kz website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 23 June, 2017 22:33...
showme.co.za XSS vulnerability
Vulnerable URL: https://showme.co.za/durban/article-library/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 30287 VIP website status:| Yes Coordinated Disclosure Timeline:...
smsgang.com XSS vulnerability
Vulnerable URL: http://www.smsgang.com/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 849823 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...
cadeautjes.nl XSS vulnerability
Vulnerable URL: https://www.cadeautjes.nl/epoqsearch/result?q=%3C/script%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E/q/%3C%2Fscript%3E%3Cimg%20src%3Dx%20onerror%3Dprompt%2FOPENBUGBOUNTY%2F%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:|...
carsscope.wehaaserver.com XSS vulnerability
Vulnerable URL: http://carsscope.wehaaserver.com/places/search/type:3%22%27%2D%2D%21 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check carsscope.wehaaserver.co...
VK.com: Нет маркера на добавление песни в плейлист пользователя
Отсутствие хеша на добавление аудиозаписи в плейлист. csrf - уязвимость отсутствие hash в добавлении песни в плейлист пользователя или группы я мог добавить в плейлист группы или пользователя - например СВОЮ рекламную аудиозапись Upd 100$ я не понимаю ... 🤐😫😥😲😨😦😭😢😱...