My Account Portal - Role Management FAQ

Click here for Case Administrator FAQ for Veeam Cloud Service Providers Case Opening Restrictions Only users with the roles of License Administrator or Case Administrator are authorized to submit support cases. Please confirm the identity of the License Administrator associated with your company'...

milb.com XSS vulnerability

Vulnerable URL: http://www.milb.com/milb/info/faq.jsp?mc=";alert'OPENBUGBOUNTY';var x=// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8616 VIP website status:| Yes Check milb.com...

mywot.com XSS vulnerability

Vulnerable URL: https://www.mywot.com/en/faq'%22alert'OPENBUGBOUNTY'...

Arbitrary File Download Vulnerability in ShowgetFaqBackupFile Function of Tibco Call Center System

The core of Tibco's call center system is a communication-based system for internal and external corporate communication. An arbitrary file download vulnerability exists in the showgetFaqBackupFile function of the Tibco Call Center System. The vulnerability file is:...

Open Ticket Request System FAQ SQL Injection Vulnerability

Open Ticket Request System OTRS is an open source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted by phone, email and other channels into different queues, service levels, and service personnel through the OTRS system ...

CVE-2016-5843

Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System OTRS allow remote attackers to execute arbitrary SQL commands via crafted search parameters...

CVE-2016-5843

Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System OTRS allow remote attackers to execute arbitrary SQL commands via crafted search parameters...

ALPINE-CVE-2016-5843

Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System OTRS allow remote attackers to execute arbitrary SQL commands via crafted search parameters...

CVE-2016-5843

Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System OTRS allow remote attackers to execute arbitrary SQL commands via crafted search parameters...

CVE-2016-5843

Multiple SQL injection vulnerabilities affect the Open Ticket Request System (OTRS) FAQ package. The issues exist in FAQ package versions 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5, allowing remote attackers to execute arbitrary SQL commands via crafted search parameters. The CVE-20...

CVE-2016-5843

Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System OTRS allow remote attackers to execute arbitrary SQL commands via crafted search parameters...

faq.epson.jp XSS vulnerability

Vulnerable URL: http://faq.epson.jp/faq/00/app/servlet/relatedqa?QID=031688&MAIN2;=%0D%0A%0D%0A//%3C/stYle/%3C/titLe/%3C/teXtarEa/%3C/scRipt/--!%3E\spam404/%3CsVg/oNloAd=alert%28/OPENBUGBOUNTY/%29//%3E\x3e Details: Description| Value ---|--- Patched:| Yes, at 28.09.2017 Latest check for patch:|...

d2w.asia XSS vulnerability

Vulnerable URL: http://www.d2w.asia/faq.php?lang=en" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15775912 VIP website status:| No Check d2w.asia SSL connection:| Grade: F...

submitter.ru XSS vulnerability

Vulnerable URL: http://submitter.ru/modules.php?op=modload=FAQ=index=yescat=1=...

phpMyFAQ 2.9.0 Cross Site Scripting

Exploit Title: phpMyFAQ 2.9.0 Stored XSS Date: 09-06-2016 Software Link: http://www.phpmyfaq.de/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description PHP filterinput function with FILTERVALIDATEURL flag is used...

WordPress FAQ WD Plugin Cross-Site Scripting

A cross-site scripting vulnerability exists in WordPress FAQ WD Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

faq.intexstore.com XSS vulnerability

Vulnerable URL: http://faq.intexstore.com/consrv/consrvportal.jsp?hidwindowname=1%22--%3E%3Csvg/onload=;prompt%28/OPENBUGBOUNTY/%29;%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

WiFi-Pumpkin v0.7.5 - Framework for Rogue Wi-Fi Access Point Attack

WiFi-Pumpkin is a security tool that provides the Rogue access point to Man-In-The-Middle and network attacks. Installation Kali 2.0/WifiSlax 4.11.1/Parrot 2.0.5 Python 2.7 git clone https://github.com/P0cL4bs/WiFi-Pumpkin.git cd WiFi-Pumpkin chmod +x installer.sh ./installer.sh --install refer t...

WordPress Q&A (Focus Plus) FAQ Plugin 1.3.9.7 - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: WordPress Q and A Focus Plus FAQ Full Path Disclosure and SQL Injection Google Dork: inurl:"wp-content/plugins/q-and-a" Date: 12-05-2016 Software Link: https://wordpress.org/plugins/q-and-a-focus-plus-faq/ Version: 1.3.9.7 and...

WordPress Q and A Focus Plus FAQ Plugin 1.3.9.7 - Multiple Vulnerabilities

Q and A Focus Plus FAQ plugin is prone to full path disclosure and SQL injection vulnerabilities. Solution Upgrade the plugin...