naturfasern.com XSS vulnerability

Vulnerable URL: http://www.naturfasern.com/kontakt/kontaktform.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16131669 VIP website status:| No Check naturfasern.com SSL...

hqs.sbt.siemens.com XSS vulnerability

Open Bug Bounty ID: OBB-258564 Description| Value ---|--- Affected Website:| hqs.sbt.siemens.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

floridasnatural.com XSS vulnerability

Vulnerable URL: http://www.floridasnatural.com/contact/employment.php?employid=1"...

PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution Exploit

Exploit for php platform in category web applications !/usr/bin/python Exploit Title: RCE for PHPMailer 5.2.20 with Exim MTA Date: 16/06/2017 Exploit Author: @phacktul Software Link: https://github.com/PHPMailer/PHPMailer Version: 5.2.20 Tested on: Debian x86/x64 CVE :...

esact.ipb.pt XSS vulnerability

Open Bug Bounty ID: OBB-250802 Description| Value ---|--- Affected Website:| esact.ipb.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PHPMailer 5.2.20 with Exim MTA - Remote Code Execution

PHPMailer 5.2.20 with Exim MTA - Remote Code Execution !/usr/bin/python Exploit Title: RCE for PHPMailer 5.2.20 with Exim MTA Date: 16/06/2017 Exploit Author: @phacktul Software Link: https://github.com/PHPMailer/PHPMailer Version: 5.2.20 Tested on: Debian x86/x64 CVE :...

fourseasonslimo.net XSS vulnerability

Vulnerable URL: http://www.fourseasonslimo.net/contact.asp?note=1/-///'/"//--...

energie-depot.com XSS vulnerability

Open Bug Bounty ID: OBB-246769 Description| Value ---|--- Affected Website:| energie-depot.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

highend3d.com XSS vulnerability

Vulnerable URL: https://www.highend3d.com/home/contact?type=...

a-r-s.de XSS vulnerability

Vulnerable URL: http://www.a-r-s.de/ueber-uns/kontaktformular.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check a-r-s.de SS...

isarklinikum.de XSS vulnerability

Vulnerable URL: https://www.isarklinikum.de/ueber-uns/kontakt/wpcf7-f1178-p418-o2 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1502103 VIP website status:| No Check isarklinikum....

PT-2017-15230

Name of the Vulnerable Software and Affected Versions Captcha versions prior to 4.3.0 Car Rental versions prior to 1.0.5 Contact Form Multi versions prior to 1.2.1 Contact Form versions prior to 4.0.6 Contact Form to DB versions prior to 1.5.7 Custom Admin Page versions prior to 0.1.2 Custom Fiel...

CVE-2017-2171: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version 1.5.7, Custom Admin Page prior to version 0.1.2, Custom Fields Search prior ...

lobeline.net XSS vulnerability

Vulnerable URL:...

ubk.cz XSS vulnerability

Vulnerable URL: https://www.ubk.cz/en/contact/contact-form Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2138043 VIP website status:| No Check ubk.cz SSL connection:| Grade: A+...

showhomesnorthpinellaspasco.com XSS vulnerability

Open Bug Bounty ID: OBB-238229 Description| Value ---|--- Affected Website:| showhomesnorthpinellaspasco.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

honshi-bus.co.jp XSS vulnerability

Vulnerable URL: http://www.honshi-bus.co.jp/contact/contactform.cgi Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2200382 VIP website status:| No Check honshi-bus.co.jp SSL...

Weblate: Abuse of Api that causes spamming users and possible DOS due to missing rate limit on contact form

Summary: In your sub-domain: https://demo.weblate.org/ , there's an endpoint that doesn't have any rate limit on it to prevent spamming you by filling the contact you form multiple times to bomb you with tons of emails. Description: Spamming and Possible DOS is being possible due to missing rate...

Weblate: Content Spoofing

The researcher found that he was able to manipulate the content of the contact form via subject parameter...

Contact Form for WordPress – Ultimate Form Builder Lite plugin <= 1.3.2 - Authenticated Cross-Site Scripting (XSS)

Contact Form for WordPress – Ultimate Form Builder Lite 1.3.2 WordPress plugin and earlier its versions suffers from Authenticated Cross-Site Scripting XSS vulnerability. Patched version 1.3.3 already available. Solution Update plugin to the latest available version at least 1.3.3...