4057 matches found
Cross site scripting
Cross Site Scripting XSS exists in PHP Scripts Mall Facebook Clone Script...
CVE-2018-6858
Cross Site Scripting XSS exists in PHP Scripts Mall Facebook Clone Script...
CVE-2018-6858
Cross Site Scripting XSS exists in PHP Scripts Mall Facebook Clone Script...
CVE-2018-6858
CVE-2018-6858 affects the PHP Scripts Mall Facebook Clone Script (notably version 1.0.5). The connected sources describe a cross-site scripting (XSS) vulnerability in the Facebook Clone Script, enabling injection of arbitrary web script or HTML via user comments, i.e., a stored XSS scenario demon...
CVE-2018-6858
Cross Site Scripting XSS exists in PHP Scripts Mall Facebook Clone Script...
CVE-2018-6858: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS exists in PHP Scripts Mall Facebook Clone Script...
PT-2018-17783
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Facebook Clone Script affected versions not specified Description The issue is related to Cross Site Scripting XSS, which is a type of security vulnerability that can allow an attacker to inject malicious scripts into a websit...
Reverb.com: Full account takeover
Hello Team, I got a security issue in reverb ios application which allows an attacker hack all users account. Since iOS application is not in the scope but still I am reporting this, because this vulnerability may compromise all users account. Please resolve this quickly. Desription: Reverb ios...
Facebook Clone Script 1.0.5 - Cross-Site Scripting
Facebook Clone Script 1.0.5 - Cross-Site Scripting. CVE-2018-6858. Webapps exploit for PHP platform Exploit Title: Facebook Clone Script 1.0.5 - Stored XSS Date: 07.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/naukri-clone-script/...
Ultimate Phishing Tool with Ngrok Integrated: SocialFish
Available Pages + Facebook: Traditional Facebook login page. Advanced login with Facebook. + Google: Traditional Google login page. Advanced login with Facebook. + LinkedIN: Traditional LinkedIN login page. + Github: Traditional Github login page. + Stackoverflow: Traditional Stackoverflow...
SocialFish - Ultimate phishing tool with Ngrok integrated
Ultimate phishing tool with Ngrok integrated. PREREQUISITES Python 2.7 Wget from Python PHP TESTED ON Kali Linux - ROLLING EDITION CLONE git clone https://github.com/UndeadSec/SocialFish.git RUNNING cd SocialFish sudo pip install -r requirements.txt python SocialFish.py AVAILABLE PAGES + Facebook...
Vastal I-Tech Buddy Zone Facebook Clone SQL Injection Vulnerability
Vastal I-Tech Buddy Zone Facebook Clone is a set of scripts for online social networking sites. A SQL injection vulnerability exists in Vastal I-Tech Buddy Zone Facebook Clone version 2.9.9. The vulnerability can be exploited by a remote attacker by sending the 'requestid' parameter to the...
Sql injection
SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...
CVE-2018-6367
SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...
CVE-2018-6367
SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...
CVE-2018-6367
CVE-2018-6367 is a confirmed SQL injection in the Vastal I-Tech Buddy Zone Facebook Clone version 2.9.9. The vulnerability is triggered via the /chat_im/chat_window.php with the request_id parameter or via the /search_events.php with the category parameter. The NVD entry reports a CVSS v3.0 base ...
CVE-2018-6367: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chatim/chatwindow.php requestid parameter or the /searchevents.php category parameter...
PT-2018-17509
Name of the Vulnerable Software and Affected Versions Vastal I-Tech Buddy Zone Facebook Clone version 2.9.9 Description A SQL Injection issue exists, allowing potential exploitation through specific parameters in certain API endpoints. The issue can be exploited via the "request id" parameter in...
Vastal I-Tech Facebook Clone 2.9.9 SQL Injection
Exploit Title: Vastal I-Tech Facebook Clone 2.9.9 - SQL Injection Dork: N/A Date: 27.01.2018 Vendor Homepage: http://vastal.com/ Software Link: http://vastal.com/buddy-zone-social-networking-script.html Version: 2.9.9 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: Ihsa...
Buddy Zone 2.9.9 - SQL Injection
Buddy Zone 2.9.9 - SQL Injection Exploit Title: Vastal I-Tech Facebook Clone 2.9.9 - SQL Injection Dork: N/A Date: 27.01.2018 Vendor Homepage: http://vastal.com/ Software Link: http://vastal.com/buddy-zone-social-networking-script.html Version: 2.9.9 Category: Webapps Tested on:...