Cross site scripting

WebsiteBaker v2.10.0 has a stored XSS vulnerability in /account/details.php...

CVE-2017-9360

WebsiteBaker v2.10.0 has a SQL injection vulnerability in /account/details.php...

CVE-2017-9360

WebsiteBaker v2.10.0 is affected by a SQL injection in /account/details.php. The CNVD entry confirms a remote attacker can exploit this to execute arbitrary SQL commands, implying severe impact on confidentiality, integrity, and possibly availability. The CVE entry itself notes a SQL injection vu...

tokinosumika.com XSS vulnerability

Vulnerable URL: http://www.tokinosumika.com/hamamatsufp/eventinfo/details.php?id="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 287194 VIP website status:| No Check...

fabulosgloria.com XSS vulnerability

Vulnerable URL: http://www.fabulosgloria.com/details.php?id=502"';-- Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3170103 VIP website status:| No Check...

assuredtelematics.com XSS vulnerability

Vulnerable URL: http://www.assuredtelematics.com/blog-details.php?id=834"alert/OPENBUGBOUNTY/...

gravegarden.org XSS vulnerability

Vulnerable URL: http://www.gravegarden.org/diuguid/details.php?id=7355...

Entrepreneur B2B Script 2.0.4 - id SQL Injection

Entrepreneur B2B Script 2.0.4 - id SQL Injection Exploit Title: Entrepreneur B2B Script v2.0.4 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/entrepreneur-b2b-script/ Demo:...

Itech B2B Script SQL Injection Vulnerability (CNVD-2017-01854)

B2B Script v4.29 is a versatile WEB solution for those who want to quickly publish their B2B portals in minutes. A SQL injection vulnerability exists in the 'id' field in the buyleads-details.php page in B2B Script v4.29, which can be exploited by an attacker to obtain sensitive information from...

Webline CMS 2016Q2 details.php parameters pgID SQL injection vulnerability

No description provided by source...

betterfavors.com XSS vulnerability

Vulnerable URL: http://betterfavors.com/details.php?asin=%22%22%3E%3Ch1%3Eaa%3C/h1%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:48 GMT Vulnerability type:| XSS Vulnerability status:|...

Webline CMS (2016Q2) - SQL Injection Vulnerability

Document Title: =============== Webline CMS 2016Q2 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1823 Release Date: ============= 2016-04-13 Vulnerability Laboratory ID VL-ID: ==================================== 1823 Comm...

New Era Company CMS SQL Injection

Document Title: =============== New Era Company CMS - id SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1678 Release Date: ============= 2016-01-28 Vulnerability Laboratory ID VL-ID: ==================================== 1678...

PhotoStore details.php gid Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/20172/info Photostore is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code execu...

Projekt Shop (details.php) Multiple SQL injection Vulnerabilities

No description provided by source...

Shimbi CMS Multiple SQL Injection Vulnerabilities

No description provided by source. Title : Shimbi CMS Vulnerable to Multiple SQL Injections Vendor : http://www.shimbi.in/ Found by : p0pc0rn Dork : intext:Powered By Shimbi CMS SQL Injection in details.php parameter --------------------------------------- http://site.com/details.php?id=sql POC -...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in OXID eShop Professional and Community Edition 4.6.8 and earlier, 4.7.x before 4.7.11, and 4.8.x before 4.8.4, and Enterprise Edition 4.6.8 and earlier, 5.0.x before 5.0.11 and 5.1.x before 5.1.4 allow remote attackers to inject arbitrary web...

iVote - details.php SQL Injection

iVote - details.php SQL Injection source: https://www.securityfocus.com/bid/61086/info iVote is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

iVote 1.0.0 SQL Injection

Exploit Title: iVot Sql Injection Google Dork: inurl:details.php?id= Date: 2013 July 11 Exploit Author: Ashiyane Digital Security Team Software Link: http://www.persianscript.ir/1391/09/25/ivote-poll-persian-script-download/ Version: 1.0.0 Tested on: Linux CentOS , Linux Ubunto , Windows 8...

Seven koncepts sql Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Seven koncepts sql Injection Vulnerability Date: 08/09/2012 Author: The Black Devils Home: 1337day Exploit DataBase 1337day.com Software Link: www.sevenkoncepts.com Category : webapps Google dork: Powered by: Seven koncepts...