Mail.ru: XSS

XSS via GET parameters in touch.cooking.lady.mail.ru touch.cooking.lady.mail.ru belongs to extended scope...

phpBB 3.2.3 - Remote Code Execution Exploit

Exploit for php platform in category web applications phpBB 3.2.3 - Remote Code Execution Exploit // All greets goes to RIPS Tech // Run this JS on Attachment Settings ACP page var pluploadsalt = ''; var formtoken = ''; var creationtime = ''; var filepath =...

Multiple vulnerabilities in extension "femanager" (femanager)

It is possible to bypass configured server side validation rules which allows an attacker to create frontend user records with invalid data. Also, the eID script allows an attacker to set various validators using GET parameters resulting in information disclosure of field values from the feusers...

PT-2018-5644 · Insteon · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: An exploitable information leak issue exists due to the HTTP server implementation incorrectly checking the number of GET parameters supplied. This leads to an arbitrarily controlled information leak on t...

Mail.ru: Cross-site Scripting (XSS) - Reflected vseapteki.ru

Reflected XSS via GET parameters in vseapteki.ru...

Mail.ru: [evo2.my.com] Internet Explorer XSS

Browser specific XSS via GET parameters in evo2.my.com. evo2.my.com is not currentl covered by bug bounty program...

Mail.ru: [target.my.com] CRLF Injection -> XSS

CRLF injection via GET paramaters in target.my.com target.my.com is not currently covered by Bug Bounty program...

Mail.ru: XSS на странице account.mail.ru/recovery

Reflected XSS via GET parameters in account.mail.ru...

Bracket-template Cross-Site Scripting Vulnerability

bracket-template is a JavaScript template library for modern browsers. A cross-site scripting vulnerability exists in bracket-template. This vulnerability can be exploited by a remote attacker to inject malicious code via GET parameters...

CVE-2017-1000488

Mautic version 2.1.0 - 2.11.0 is vulnerable to an inline JS XSS attack when using Mautic forms on a Mautic landing page using GET parameters to pre-populate the form...

Cross site scripting

Mautic version 2.1.0 - 2.11.0 is vulnerable to an inline JS XSS attack when using Mautic forms on a Mautic landing page using GET parameters to pre-populate the form...

International Islamic University Chittagong: SQL injection in http://119.18.148.140/hrd/js/makeemployeeid.php

Hello, The mentioned page takes at least two GET parameters, namely q and departmentname. The two parameters are vulnerable to SQL injection as both are placed into SQL query strings without proper sanitization. It seems like the PHP script uses the affected parameters into two SQL queries, since...

Mail.ru: reflected XSS on healt.mail.ru

Reflected XSS via GET paramters in quiz game on promo site in health.mail.ru subdomain. .health.mail.ru was in the bug bounty program's scope on the moment of report submission...

Mail.ru: [new.wf.mail.ru] XSS Request-URI

Reflected XSS via GET parameters in new.wf.mail.ru wf.mail.ru is not currently covered with bug bounty program...

Mail.ru: [beta.tracker.my.com] XSS Request-URI

Reflected XSS via GET parameters in beta.tracker.my.com tracker.my.com is not currently covered with bug bounty program...

DALIM SOFTWARE ES Core 5.0 Build 7184.1 XSS / CSRF

!-- DALIM SOFTWARE ES Core 5.0 build 7184.1 Multiple Stored XSS And CSRF Vulnerabilities Vendor: Dalim Software GmbH Product web page: https://www.dalim.com Affected version: ES/ESPRiT 5.0 build 7184.1 build 7163.2 build 7163.0 build 7135.0 build 7114.1 build 7114.0 build 7093.1 build 7093.0 buil...

CVE-2017-11418

Fiyo CMS 2.0.7 has SQL injection in dapur/apps/apparticle/controller/articlelist.php via $GET'cat', $GET'user', $GET'level', and $GET'iSortCol'.$i...

CVE-2017-7416

ntopng before 3.0 allows XSS because GET and POST parameters are improperly validated...

Cross site scripting

ntopng before 3.0 allows XSS because GET and POST parameters are improperly validated...

UBUNTU-CVE-2017-7416

ntopng before 3.0 allows XSS because GET and POST parameters are improperly validated...