13595 matches found
mamaija.pl XSS vulnerability
Vulnerable URL:...
CVE-2017-15188
A persistent stored XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the hosts array parameter to module/admindevice/index.php...
CVE-2017-15215: Improper Neutralization of Input During Web Page Generation
Reflected XSS vulnerability in Shaarli v0.9.1 allows an unauthenticated attacker to inject JavaScript via the searchtags parameter to index.php. If the victim is an administrator, an attacker can for example take over the admin session or change global settings or add/delete links. It is also...
CVE-2017-15188: Improper Neutralization of Input During Web Page Generation
A persistent stored XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the hosts array parameter to module/admindevice/index.php...
CVE-2017-15188
A persistent stored XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the hosts array parameter to module/admindevice/index.php...
CVE-2017-15215
Reflected XSS vulnerability in Shaarli v0.9.1 allows an unauthenticated attacker to inject JavaScript via the searchtags parameter to index.php. If the victim is an administrator, an attacker can for example take over the admin session or change global settings or add/delete links. It is also...
CVE-2017-15215
CVE-2017-15215 is a reflected XSS vulnerability in Shaarli v0.9.1. An unauthenticated attacker can inject JavaScript via the searchtags parameter to index.php, potentially compromising admin sessions or altering global settings if the victim is an administrator, or executing JavaScript for unauth...
PT-2017-13910
Name of the Vulnerable Software and Affected Versions Shaarli version 0.9.1 Description The issue allows an unauthenticated attacker to inject JavaScript via the searchtags parameter to "index.php". If the victim is an administrator, an attacker can take over the admin session, change global...
PT-2017-13880
Name of the Vulnerable Software and Affected Versions EyesOfNetwork version 5.1-0 Description A persistent XSS issue in the EyesOfNetwork web interface allows remote authenticated administrators to inject arbitrary web script or HTML via the hosts array parameter to the "module/admin...
mmegi.bw XSS vulnerability
Vulnerable URL: http://www.mmegi.bw/index.php?sid=1%22%3E%3Cscript%3Ealert0;%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 80973 VIP website status:| No Coordinated Disclosure Timeline:...
proel.org XSS vulnerability
Vulnerable URL: http://www.proel.org/index.php?sw=alert/OPENBUGBOUNTY/...
Cross site scripting
Cross-site scripting XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the object parameter to module/adminconf/index.php...
CVE-2017-14983: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the object parameter to module/adminconf/index.php...
CVE-2017-14979: Undefined Security Weakness
Gxlcms uses an unsafe character-replacement approach in an attempt to restrict access, which allows remote attackers to read arbitrary files via modified pathnames in the s parameter to index.php, related to Lib/Admin/Action/TplAction.class.php and Lib/Admin/Common/function.php...
CVE-2017-14985: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the url parameter to module/moduleframe/index.php...
go.sayt.uz XSS vulnerability
Vulnerable URL: http://go.sayt.uz/index.php?a=search=13'"220.ro=0=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated...
PT-2017-13802
Name of the Vulnerable Software and Affected Versions EyesOfNetwork version 5.1-0 Description A cross-site scripting XSS issue exists in the EyesOfNetwork web interface, allowing remote authenticated administrators to inject arbitrary web script or HTML. This can be achieved by manipulating the...
PT-2017-13804
Name of the Vulnerable Software and Affected Versions EyesOfNetwork version 5.1-0 Description The issue is related to a cross-site scripting XSS vulnerability in the EyesOfNetwork web interface. This allows remote authenticated users to inject arbitrary web script or HTML via the url parameter to...
Sql injection
SQL Injection exists in /includes/event-management/index.php in the event-espresso-free aka Event Espresso Lite plugin v3.1.37.12.L for WordPress via the recurrenceid parameter to /wp-admin/admin.php...