372 matches found
ik.my XSS vulnerability
Vulnerable URL: http://ik.my/contact.php?subject=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Check ik.my SS...
djstar.com.au XSS vulnerability
Vulnerable URL: http://www.djstar.com.au/contact.php?subject=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No...
gainsgrove.co.uk XSS vulnerability
Vulnerable URL: http://www.gainsgrove.co.uk/contact.php?subject=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 1 VIP website status:| No...
fpnc.com XSS vulnerability
Vulnerable URL: https://www.fpnc.com/contact.php?subject=" Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:11 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4859050 Google Pagerank| 4 VIP website status:| ...
alsetex.fr XSS vulnerability
Vulnerable URL: http://www.alsetex.fr/contact.php?subject=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 22992094 Google Pagerank| 4 VIP website status:| No Check alsetex.fr SSL...
swiss-sar.ch XSS vulnerability
Open Bug Bounty ID: OBB-80682 Description| Value ---|--- Affected Website:| swiss-sar.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2015-3921
Coppermine Photo Gallery contains a cross-site scripting (XSS) flaw in contact.php, exploitable by remote authenticated users via the referer parameter. Affected versions are before 1.5.36. The vulnerability allows injection of arbitrary web script/HTML. Root cause is improper handling of the ref...
CVE-2015-3921: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in contact.php in Coppermine Photo Gallery before 1.5.36 allows remote authenticated users to inject arbitrary web script or HTML via the referer parameter...
CVE-2014-8085: Undefined Security Weakness
Unrestricted file upload vulnerability in the CWebContact::doModel method in oc-includes/osclass/controller/contact.php in OSClass before 3.4.3 allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in an...
Osclass 'contact.php' Arbitrary File Upload Vulnerability
OSClass is a PHP MySQL based development , used to create and manage classified ads website open source system . An arbitrary file upload vulnerability exists in Osclass 'contact.php', which can be exploited by an attacker to upload arbitrary files to an affected computer...
[KIS-2014-16] Osclass <= 3.4.2 (contact.php) Unrestricted File Upload Vulnerability
--------------------------------------------------------------------- Osclass = 3.4.2 contact.php Unrestricted File Upload Vulnerability --------------------------------------------------------------------- - Software Link: http://osclass.org/ - Affected Versions: Version 3.4.2 and probably prior...
Osclass 3.4.2 Shell Upload Vulnerability
Osclass versions 3.4.2 and below suffer from a remote shell upload vulnerability. --------------------------------------------------------------------- Osclass redirectTo osccontacturl ; 107. 108. 109. if !moveuploadedfile$tmpName, $path 110. unset$path; 111. 112. 113. The vulnerability exists...
CVE-2014-8365
Multiple cross-site scripting XSS vulnerabilities in Xornic Contact Us allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 email parameter to contact.php or 3 PATHINFO to setup.php, related to the "PHPSELF" variable...
CVE-2014-8365
Multiple cross-site scripting XSS vulnerabilities in Xornic Contact Us allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 email parameter to contact.php or 3 PATHINFO to setup.php, related to the "PHPSELF" variable...
CVE-2014-8365
CVE-2014-8365 affects the Xornic Contact Us component, with XSS weaknesses exploitable via the name or email fields of contact.php or by PATH_INFO to setup.php, related to the PHP_SELF variable. The connected documents confirm this vulnerability class but do not provide product version details, c...
CVE-2014-8365: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Xornic Contact Us allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 email parameter to contact.php or 3 PATHINFO to setup.php, related to the "PHPSELF" variable...
CVE-2014-8307
Multiple cross-site scripting XSS vulnerabilities in skins/default/outline.tpl in C97net Cart Engine before 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 path parameter in the "drop down TOP menu with path" section or 2 printthispage variable in the footercontentbloc...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in skins/default/outline.tpl in C97net Cart Engine before 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 path parameter in the "drop down TOP menu with path" section or 2 printthispage variable in the footercontentbloc...
city-sleeping.de XSS vulnerability
Vulnerable URL: http://www.city-sleeping.de/contact.php?la=" Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 19:00 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VI...
superstories.be XSS vulnerability
Open Bug Bounty ID: OBB-51061 Description| Value ---|--- Affected Website:| superstories.be Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...