4924 matches found
energie-depot.com XSS vulnerability
Open Bug Bounty ID: OBB-246769 Description| Value ---|--- Affected Website:| energie-depot.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
highend3d.com XSS vulnerability
Vulnerable URL: https://www.highend3d.com/home/contact?type=...
a-r-s.de XSS vulnerability
Vulnerable URL: http://www.a-r-s.de/ueber-uns/kontaktformular.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check a-r-s.de SS...
isarklinikum.de XSS vulnerability
Vulnerable URL: https://www.isarklinikum.de/ueber-uns/kontakt/wpcf7-f1178-p418-o2 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1502103 VIP website status:| No Check isarklinikum....
lobeline.net XSS vulnerability
Vulnerable URL:...
ubk.cz XSS vulnerability
Vulnerable URL: https://www.ubk.cz/en/contact/contact-form Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2138043 VIP website status:| No Check ubk.cz SSL connection:| Grade: A+...
showhomesnorthpinellaspasco.com XSS vulnerability
Open Bug Bounty ID: OBB-238229 Description| Value ---|--- Affected Website:| showhomesnorthpinellaspasco.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
honshi-bus.co.jp XSS vulnerability
Vulnerable URL: http://www.honshi-bus.co.jp/contact/contactform.cgi Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2200382 VIP website status:| No Check honshi-bus.co.jp SSL...
Weblate: Abuse of Api that causes spamming users and possible DOS due to missing rate limit on contact form
Summary: In your sub-domain: https://demo.weblate.org/ , there's an endpoint that doesn't have any rate limit on it to prevent spamming you by filling the contact you form multiple times to bomb you with tons of emails. Description: Spamming and Possible DOS is being possible due to missing rate...
Weblate: Content Spoofing
The researcher found that he was able to manipulate the content of the contact form via subject parameter...
Contact Form for WordPress – Ultimate Form Builder Lite plugin <= 1.3.2 - Authenticated Cross-Site Scripting (XSS)
Contact Form for WordPress – Ultimate Form Builder Lite 1.3.2 WordPress plugin and earlier its versions suffers from Authenticated Cross-Site Scripting XSS vulnerability. Patched version 1.3.3 already available. Solution Update plugin to the latest available version at least 1.3.3...
Ninja Forms < 3.0.31 - XSS
The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a XSS security vulnerability...
WordPress Contact Form Manager CSRF / XSS
------------------------------------------------------------------------ Cross-Site Request Forgery & Cross-Site Scripting in Contact Form Manager WordPress Plugin ------------------------------------------------------------------------ Edwin Molenaar, July 2016...
WordPress Contact Form 4.0.0 Cross Site Scripting Vulnerability
WordPress Contact Form plugin version 4.0.0 suffers from a cross site scripting vulnerability. ------------------------------------------------------------------------ Stored Cross-Site Scripting vulnerability in Contact Form WordPress Plugin...
WordPress Contact Form 4.0.0 Cross Site Scripting
------------------------------------------------------------------------ Stored Cross-Site Scripting vulnerability in Contact Form WordPress Plugin ------------------------------------------------------------------------ Julien Rentrop, July 2016...
Multiple Vulnerabilities in WordPress Contact Form Manager Plugin
WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . Cross-site scripting and cross-site request forgery vulnerabilities exist in the WordPress Contact Form Manager...
WordPress Plugin Contact Form Manager - Cross-Site Request Forgery Cross-Site Scripting
WordPress Plugin Contact Form Manager - Cross-Site Request Forgery Cross-Site Scripting !-- Source: https://sumofpwn.nl/advisory/2016/crosssiterequestforgerycrosssitescriptingincontactformmanagerwordpressplugin.html Abstract It was discovered that Contact Form Manager does not protect against...
Contact Form by BestWebSoft <= 4.0.1 - Stored Cross-Site Scripting (XSS)
The Contact Form by BestWebSoft WordPress plugin was affected by a Stored Cross-Site Scripting XSS security vulnerability...
WordPress Contact Form Manager Plugin - Cross-Site Request Forgery / Cross-Site Scripting Vulnerabil
Exploit for php platform in category web applications !-- Source: https://sumofpwn.nl/advisory/2016/crosssiterequestforgerycrosssitescriptingincontactformmanagerwordpressplugin.html Abstract It was discovered that Contact Form Manager does not protect against Cross-Site Request Forgery. This allo...