37 matches found
landroverinsurance.com XSS vulnerability
Vulnerable URL: https://www.landroverinsurance.com/Verex/html/help.html%3C!%27/%22/%27/%22/--%3E%3C/Script%3E%3CImage%20Srcset=K%20/;%20Onerror=confirm%60OPENBUGBOUNTY%60%20//%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.08.2017 Vulnerability type:| XSS...
holidayautos.co.uk XSS vulnerability
Vulnerable URL: https://www.holidayautos.co.uk/help/'"--!...
help.webex.com XSS vulnerability
Vulnerable URL: https://help.webex.com/tags?tags=%22%3E%3C/option%3E%3C%20/select%3E%3Cbody/onpageshow=prompt%28%29%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
ebates.com XSS vulnerability
Vulnerable URL: http://www.ebates.com/help/customercare/whereismyrebate.do Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 518 Google Pagerank| 5 VIP website status:| Yes Check...
DEBIAN-CVE-2015-1159
Cross-site scripting XSS vulnerability in the cgiputs function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/...
Avigilon Control Center Directory Traversal Vulnerability
Avigilon Control Center ACC is a suite of video management control center software from Avigilon Canada. The software offers advanced video search, remote monitoring and a high degree of integration. A directory traversal vulnerability exists in Avigilon Control Center. This allows remote attacke...
vBulletin Forum Component 'forum/help' Page Cross-Site Scripting Vulnerability
vBulletin is the United States Internet Brands and vBulletin Solutions, Inc. jointly developed an open source commercial Web forum program . Forum is one of the forum components . A cross-site scripting vulnerability exists in vBulletin, which allows remote attackers to exploit the vulnerability ...
CVE-2014-5315: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Help Page in multiple Adobe products vulnerable to cross-site scripting
Overview The Help page provided in multiple Adobe products contains a cross-site scripting vulnerability. Yuji Tounai of bogus.jp reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrary script may be...
JVN#84376800: Help Page in multiple Adobe products vulnerable to cross-site scripting
The Help page provided in multiple Adobe products contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version of the product according to the information provided by the developer...
CVE-2012-5460: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the help page in Juniper Secure Access SA with IVE OS before 7.1r13, 7.2.x before 7.2r7, and 7.3.x before 7.3r2 allows remote attackers to inject arbitrary web script or HTML via the WWHSearchWordsText parameter...
CVE-2013-3376: Improper Input Validation
Open redirect vulnerability in the help page in Cisco Video Surveillance Operations Manager allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka Bug ID CSCty74490...
CVE-2010-2290
Cross-site scripting XSS vulnerability in cgi-bin/cgix/help in McAfee Unified Threat Management UTM Firewall formerly SnapGear firmware 3.0.0 through 4.0.6 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
Microsoft Security Bulletin MS10-039 - Important Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege (2028554)
Microsoft Security Bulletin MS10-039 - Important Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege 2028554 Published: June 08, 2010 Version: 1.0 General Information Executive Summary This security update resolves one publicly disclosed and two privately reported...
Microsoft SharePoint Help Page Denial of Service (MS10-039; CVE-2010-1264)
Windows SharePoint Services provide a platform for collaboration applications and document management. Office SharePoint Server is an integrated suite of server capabilities built on top of Windows SharePoint Services. A denial of service vulnerability has been discovered in Microsoft SharePoint...
CVE-2010-1264: Undefined Security Weakness
Unspecified vulnerability in Microsoft Windows SharePoint Services 3.0 SP1 and SP2 allows remote attackers to cause a denial of service hang via crafted requests to the Help page that cause repeated restarts of the application pool, aka "Sharepoint Help Page Denial of Service Vulnerability."...
PTC Site's Remote Command Execution / Cross Site Scripting
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ @Title: PTC Site's RCE/XSS Vulnerability @Vendor: http://www.ptcsites4sale.info & and etc...:D @Author: CrazyMember @Mail: [email protected] @SPC Thanks: XroGuE 4 r3p0r7 :P @Dork:"intext:Warning: passthru" "inurl:view=help"...