twghlffkg.edu.hk XSS vulnerability

Open Bug Bounty ID: OBB-282717 Description| Value ---|--- Affected Website:| twghlffkg.edu.hk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

stmkg.edu.hk XSS vulnerability

Vulnerable URL: http://www.stmkg.edu.hk/home.php?id=1...

hrvatski-plivacki-savez.hr XSS vulnerability

Vulnerable URL: http://www.hrvatski-plivacki-savez.hr/Sadrzaj/Home.php?id=Hom"';-- 〈=Eng Details: Description| Value ---|--- Patched:| No Latest check for patch:| 24.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2380620 VIP website status:| No Check...

aex.ablenetinc.com XSS vulnerability

Vulnerable URL: http://aex.ablenetinc.com/home.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check aex.ablenetinc.com SSL...

CVE-2017-7621: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting Vulnerability in core-eMLi in AuroMeera Technometrix Pvt. Ltd. eMLi V1.0 allows an Attacker to send malicious code, generally in the form of a browser-side script, to a different end user via the page parameter to code/studentportal/home.php. The affected versions are eMLi...

PT-2017-17849

Name of the Vulnerable Software and Affected Versions AuroMeera Technometrix Pvt. Ltd. eMLi versions 1.0 Description The issue allows an attacker to send malicious code, generally in the form of a browser-side script, to a different end user via the "page" parameter to "code/student...

Cookie injection vulnerability in mallbuilder frontend v7.3.4 home.php file

MallBuilder is a multi-user online shopping mall solution system based on PHP+MYSQL. mallbuilder v7.3.4 has a SQL injection vulnerability in the foreground home.php, which allows attackers to obtain sensitive database information using common SQL injection tools...

cogindo.co.id XSS vulnerability

Vulnerable URL: http://cogindo.co.id/v3/home.php?lang=prompt'OPENBUGBOUNTY'...

apexgulf.ae XSS vulnerability

Vulnerable URL: http://www.apexgulf.ae/home.php?lang=fr"...

doitung.org XSS vulnerability

Vulnerable URL: http://www.doitung.org/home.php?gg=1%22--%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3Eht Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3375914 VIP website status:| N...

Qualiteam X-Cart 4.0.8 home.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabilities could permit remot...

Opial 1.0 - Arbitrary File Upload/XSS/SQL Injection Vulnerabilities

No description provided by source. ::::::::::::::::::::R3AL.RU:::::::::::::::::::: Opial 1.0 Arbitrary File Upload & XSS & SQL Injection genresparent Author: LMaster Greetz: r3al.ru Official Site with demo: http://www.opial.com --Arbitrary File Upload-- 1. Go to http://www.site.com/register.php 2...

CVE-2012-5315

Multiple cross-site scripting XSS vulnerabilities in php ireport 1.0 allow remote attackers to inject arbitrary web script or HTML via the message parameter to 1 messagesviewer.php, 2 home.php, or 3 history.php...

PT-2012-5914

Name of the Vulnerable Software and Affected Versions php ireport version 1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the message parameter to specific API endpoints, including "messages viewer.php", "home.php", or "history.php". This can lead to...

CVE-2012-5315: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in php ireport 1.0 allow remote attackers to inject arbitrary web script or HTML via the message parameter to 1 messagesviewer.php, 2 home.php, or 3 history.php...

CMS United SQL Injection

======================================================================= CMS United Blind SQL Injection ======================================================================= CMS United Blind SQL Injection on home.php file Site vendor: www.cmsunited.com Date: 12/09/2012 Author: s4r4d0 Contact:...

PHP iReport 1.0 - Remote Html Code Injection

PHP iReport 1.0 - Remote Html Code Injection !/usr/bin/perl Title = phpireport v1.0 = Remote Html Code injection Author = Or4nG.M4n Download = http://garr.dl.sourceforge.net/project/phpireport/phpireport%20v1.0%20alpha%20revision%2025.rar Thnks : +----------------------------------+ | xSs m4n i-H...

Pecio CMS 'template' Multiple Remote File Include Vulnerabilities

This host is running Pecio CMS and is prone to multiple remote file inclusion vulnerabilities. OpenVAS Vulnerability Test $Id: gbpeciocmsmultrfivuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Pecio CMS 'template' Multiple Remote File Include Vulnerabilities Authors: Madhuri D Copyright: Copyright c...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Pecio CMS 2.0.5 allow remote attackers to execute arbitrary PHP code via a URL in the template parameter to 1 post.php, 2 article.php, 3 blog.php, or 4 home.php in pectemplates/nova-blue/...

CVE-2009-4993: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in home.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...