6165 matches found
karriere.de.ebmpapst.com XSS vulnerability
Open Bug Bounty ID: OBB-573020 Description| Value ---|--- Affected Website:| karriere.de.ebmpapst.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...
rhinolinings.com XSS vulnerability
Open Bug Bounty ID: OBB-572494 Description| Value ---|--- Affected Website:| rhinolinings.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
mecd.gob.es XSS vulnerability
Open Bug Bounty ID: OBB-572057 Description| Value ---|--- Affected Website:| mecd.gob.es Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Ninja Forms < 3.2.15 - Parameter Tampering
The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a Parameter Tampering security vulnerability...
Ninja Forms <= 3.2.13 - Cross-Site Scripting (XSS)
The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
randrcommercialrealty.com XSS vulnerability
Open Bug Bounty ID: OBB-561411 Description| Value ---|--- Affected Website:| randrcommercialrealty.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
phuketarea.com XSS vulnerability
Open Bug Bounty ID: OBB-561002 Description| Value ---|--- Affected Website:| phuketarea.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
golfclub-haan-duesseltal.de XSS vulnerability
Open Bug Bounty ID: OBB-558833 Description| Value ---|--- Affected Website:| golfclub-haan-duesseltal.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
stangelas.nuigalway.ie XSS vulnerability
Open Bug Bounty ID: OBB-554647 Description| Value ---|--- Affected Website:| stangelas.nuigalway.ie Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
creditreform.de XSS vulnerability
Open Bug Bounty ID: OBB-548306 Description| Value ---|--- Affected Website:| creditreform.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
atttm.fr XSS vulnerability
Open Bug Bounty ID: OBB-522812 Description| Value ---|--- Affected Website:| atttm.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
medis.pt XSS vulnerability
Open Bug Bounty ID: OBB-485562 Description| Value ---|--- Affected Website:| medis.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
WordPress Fast Secure Contact Form – Clockwork SMS plugin <=2.1.2 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability found by Elias Dimopoulos in WordPress Fast Secure Contact Form – Clockwork SMS plugin versions =2.1.2. Solution Update the WordPress Fast Secure Contact Form – Clockwork SMS plugin to the latest available version at least 2.4.0...
WordPress Contact Form 7 – Clockwork SMS plugin <=2.3.0 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability found by Elias Dimopoulos in WordPress Contact Form 7 – Clockwork SMS plugin versions =2.3.0. Solution Update the WordPress Contact Form 7 – Clockwork SMS plugin to the latest available version at least 2.3.0...
edcud.de XSS vulnerability
Open Bug Bounty ID: OBB-454136 Description| Value ---|--- Affected Website:| edcud.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
safmuebles.com XSS vulnerability
Open Bug Bounty ID: OBB-451376 Description| Value ---|--- Affected Website:| safmuebles.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
WinduCMS 3.1 - Local File Disclosure
WinduCMS 3.1 - Local File Disclosure !/usr/bin/python Exploit Title: WinduCMS = 3.1 - Local File Disclosure Date: 2017-12-03 Exploit Author: Maciek Krupa Vendor Homepage: http://windu.org Version: 3.1 Tested on: Linux Debian 9 // Description // Local File Disclosure vulnerability exists in WinduC...
promaxelectronics.com XSS vulnerability
Open Bug Bounty ID: OBB-447401 Description| Value ---|--- Affected Website:| promaxelectronics.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
WinduCMS 3.1 Local File Disclosure
!/usr/bin/python Exploit Title: WinduCMS = 3.1 - Local File Disclosure Date: 2017-12-03 Exploit Author: Maciek Krupa Vendor Homepage: http://windu.org Version: 3.1 Tested on: Linux Debian 9 // Description // Local File Disclosure vulnerability exists in WinduCMS through a vulnerable PHPMailer...
Shopify: Cross-site scripting in "Contact customer" form
Hi, I found HTML Injection Vulnerability while admin contact with customer. In this vulnerability admin is attacker whereas customer is victim. Steps to Reproduce: 1. Go to Customers and Click on Customer Email Address. 2. New Pop-Up window will become open, In Customer Message field type this ht...