EUVD-2014-5100

Malware in sbrugna...

EUVD-2014-8459

Malware in sbrugna...

CVE-2014-8622

Cross-site scripting XSS vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter...

CVE-2014-5202

Cross-site scripting XSS vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter...

compfight.com XSS vulnerability

Open Bug Bounty ID: OBB-686425 Description| Value ---|--- Affected Website:| compfight.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

compfight.com XSS vulnerability

Vulnerable URL: http://compfight.com/search/';alert%22OPENBUGBOUNTY%22;' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 203359 VIP website status:| No Coordinated Disclosure...

compfight.com XSS vulnerability

Open Bug Bounty ID: OBB-94767 Description| Value ---|--- Affected Website:| compfight.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

CVE-2014-8622

Cross-site scripting XSS vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter...

CVE-2014-8622

CVE-2014-8622 : This vulnerability affects the WordPress Compfight plugin, specifically version 1.4, where the compfight-search.php component is vulnerable to cross-site scripting via the search-value parameter. The issue could allow remote authenticated users to inject arbitrary script or HTML. ...

CVE-2014-8622

Cross-site scripting XSS vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter...

WordPress Compfight Plugin <= 1.4 - XSS

This vulnerability is in the compfight-search.php. It allows authenticated users to inject arbitrary web script or HTML via the "search-value" parameter. Solution Update the plugin...

PT-2014-8651

Name of the Vulnerable Software and Affected Versions Compfight plugin version 1.4 for WordPress Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter in the compfight-search.php file. This could...

CVE-2014-8622: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter...

Compfight < 1.5 Cross-Site Scripting (XSS)

The compfight WordPress plugin was affected by security vulnerability...

CVE-2014-5202

Cross-site scripting XSS vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter...

CVE-2014-5202

Cross-site scripting XSS vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the search-value parameter...

CVE-2014-5202

CVE-2014-5202 describes a cross-site scripting (XSS) vulnerability in the WordPress plugin Compfight 1.4 . The issue arises in the file compfight-search.php where an attacker can inject arbitrary script/HTML via the search-value parameter. The CVE indicates the vulnerability affects authenticated...

PT-2014-6341

Name of the Vulnerable Software and Affected Versions Compfight plugin version 1.4 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML. This is achieved via the search-value parameter in the compfight-search.php file...