key.airberlin.com XSS vulnerability

Open Bug Bounty ID: OBB-635180 Description| Value ---|--- Affected Website:| key.airberlin.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

turkishexporter.net XSS vulnerability

Vulnerable URL: https://www.turkishexporter.net/default.aspx?s=%22%3E%3Csvg%20onload=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 05.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

Multiple Plugins - Unauthenticated RCE via PHPUnit

There was an Unauthenticated Remote Code Execution RCE vulnerability in PHPUnit, a widely used testing framework for PHP. This vulnerability has been seen exploited in the wild. curl -X POST --data ""...

Exponent CMS 'getSection' Function SQL Injection Vulnerability

Exponent CMS is a free, open source PHP-based modular content management system CMS of the U.S. OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A SQL injection vulnerability exists in th...

WordPress WP Ultimate Exporter 1.0 / 1.1 SQL Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 After reading bugtraq post1 I noticed additional vulnerability from WordPress plugin wp-ultimate-exporter2. Versions 1.0 and 1.1 are affected of SQL injection vulnerability without authentication. 1: http://seclists.org/bugtraq/2016/Feb/172 2:...

WordPress WP Ultimate Exporter Plugin <= 1.1 - SQL Injection

This plugin is prone to an SQL injection vulnerability. It allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

WordPress WP Ultimate Exporter 1.0 Cross Site Scripting

FULL DISCLOSURE Product : WP Ultimate Exporter Exploit Author : Rahul Pratap Singh Version : 1.0 Home page Link : https://wordpress.org/plugins/wp-ultimate-exporter/ Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 24/Feb/2016 XSS Vulnerability:...

WP Ultimate Exporter 1.0.0 - Reflected Cross-Site Scripting (XSS)

The Export WordPress Data with Advanced Filters WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

WordPress WP Ultimate Exporter Plugin <= 1.0.0 - XSS

This plugin is prone to a cross site scripting vulnerability, because "exportname" and "exportposttypename" parameters are not sanitized. Solution Update the plugin...

Woocommerce Exporter < 1.8.4 - Privilege Esclation

The WooCommerce – Store Exporter WordPress plugin was affected by a Privilege Esclation security vulnerability...

genericmedicineexporter.com XSS vulnerability

Vulnerable URL: http://www.genericmedicineexporter.com/contact-us.html?prodname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5574897...

WordPress Aspose DOC Exporter Plugin Arbitrary File Download Vulnerability

WordPress is a blogging platform developed using the PHP language that supports personal blog sites on servers with PHP and MySQL.Aspose DOC Exporter is a plugin that allows administrators to export post content. An arbitrary file download vulnerability exists in the WordPress Aspose DOC Exporter...

WordPress Aspose DOC Exporter Plugin 1.0任意文件上传漏洞

No description provided by source...

WordPress Aspose.Words Exporter plugin 1.0 - Arbitrary File Download

WordPress Aspose.Words Exporter plugin is prone to an arbitrary file download vulnerability. It allows an attacker to download arbitrary files from the web server and get potentially sensitive information. Solution Update the plugin...

WordPress Plugin aspose-doc-exporter 1.0 - Arbitrary File Download

|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | + Exploit Title:Wordpress aspose-doc-exporter Plugin Arbitrary File Download Vulnerability | | + Exploit Author: Ashiyane Digital Security Team | | + Vendor Homepage :...

WordPress Aspose Doc Exporter File Download

|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | + Exploit Title: Wordpress aspose-doc-exporter Plugin Arbitrary File Download Vulnerability | | + Exploit Author: Ashiyane Digital Security Team | | + Vendor Homepage :...

WordPress Aspose Importer / Exporter 1.0 File Download

Exploit Title : Wordpress Aspose Importer & Exporter v1.0 Plugin File Download Vulnerability Exploit Author : Ashiyane Digital Security Team Vendor Homepage: https://wordpress.org/plugins/aspose-importer-exporter/ Download Link :...

WordPress Aspose PDF Exporter File Download

Exploit Title : Wordpress Aaspose-pdf-exporter Plugin File Download Vulnerability Exploit Author : Ashiyane Digital Security Team Vendor Homepage: https://wordpress.org/plugins/aspose-pdf-exporter/ Download Link : https://downloads.wordpress.org/plugin/aspose-pdf-exporter.zip Date : 28 / 3 / 2015...

Aspose.Words Exporter < 2.0 - Unauthenticated Arbitrary File Download

The Aspose.Words Exporter WordPress plugin was affected by an Arbitrary File Download security vulnerability. The asposedocexporterdownload.php file of the plugin does not restrict access, check permission or validate the file parameter, allowing unauthenticated user to download any file from the...

Aspose.Words Exporter < 2.0 - Unauthenticated Arbitrary File Download

The Aspose.Words Exporter WordPress plugin was affected by an Arbitrary File Download security vulnerability. The asposedocexporterdownload.php file of the plugin does not restrict access, check permission or validate the file parameter, allowing unauthenticated user to download any file from the...