CVE-2018-14082

PHP Scripts Mall JOB SITE aka Job Portal 3.0.1 has Cross-site Scripting XSS via the search bar...

Cross site scripting

PHP Scripts Mall JOB SITE aka Job Portal 3.0.1 has Cross-site Scripting XSS via the search bar...

CVE-2018-14082

PHP Scripts Mall JOB SITE aka Job Portal 3.0.1 has Cross-site Scripting XSS via the search bar...

CVE-2018-14082

CVE-2018-14082 affects the PHP Scripts Mall JOB SITE (aka Job Portal) 3.0.1 and is described as a Cross‑site Scripting (XSS) vulnerability exploitable via the search bar. Connected sources (ExploitDB/NVD) indicate public PoCs/exploits for a stored XSS vector via the search field. The documents do...

CVE-2018-2891

Vulnerability in the Oracle Retail Bulk Data Integration component of Oracle Retail Applications subcomponent: BDI Job Scheduler. The supported version that is affected is 16.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reta...

PT-2018-15896

Name of the Vulnerable Software and Affected Versions Oracle Retail Bulk Data Integration version 16.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Retail Bulk Data Integration. Successful attacks require human interaction from a perso...

PT-2018-12329

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall JOB SITE aka Job Portal version 3.0.1 Description The issue concerns a Cross-site Scripting XSS flaw that can be triggered via the search bar. Recommendations For version 3.0.1, update to a newer version that contains a fix fo...

CVE-2018-14082: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall JOB SITE aka Job Portal 3.0.1 has Cross-site Scripting XSS via the search bar...

CVE-2018-2891: Undefined Security Weakness

Vulnerability in the Oracle Retail Bulk Data Integration component of Oracle Retail Applications subcomponent: BDI Job Scheduler. The supported version that is affected is 16.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reta...

WordPress Job Manager 4.1.0 Cross Site Scripting

Exploit Title: Wordpress Plugin Job Manager v4.1.0 Stored Cross Site Scripting Google Dork: N/A Date: 2018-07-15 Exploit Author: Berk Dusunur & Selimcan Ozdemir Vendor Homepage: https://wpjobmanager.com Software Link: https://downloads.wordpress.org/plugin/wp-job-manager.latest-stable.zip Affecte...

Wordpress Job Manager 4.1.0 Plugin - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin Job Manager v4.1.0 Stored Cross Site Scripting Google Dork: N/A Date: 2018-07-15 Exploit Author: Berk Dusunur & Selimcan Ozdemir Vendor Homepage: https://wpjobmanager.com Software Link:...

WordPress Plugin Job Manager 4.1.0 - Cross-Site Scripting

WordPress Plugin Job Manager 4.1.0 - Cross-Site Scripting Exploit Title: Wordpress Plugin Job Manager v4.1.0 Stored Cross Site Scripting Google Dork: N/A Date: 2018-07-15 Exploit Author: Berk Dusunur & Selimcan Ozdemir Vendor Homepage: https://wpjobmanager.com Software Link:...

WordPress Plugin Job Manager 4.1.0 - Cross-Site Scripting

Exploit Title: Wordpress Plugin Job Manager v4.1.0 Stored Cross Site Scripting Google Dork: N/A Date: 2018-07-15 Exploit Author: Berk Dusunur & Selimcan Ozdemir Vendor Homepage: https://wpjobmanager.com Software Link: https://downloads.wordpress.org/plugin/wp-job-manager.latest-stable.zip Affecte...

[SECURITY] Fedora 28 Update: glpi-9.2.4-2.fc28

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

Code injection

In Apache Spark 2.1.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, it's possible for a malicious user to construct a URL pointing to a Spark cluster's UI's job and stage info pages, and if a user can be tricked into accessing the URL, can be used to cause script to execute and expose information from the...

CVE-2018-8024

In Apache Spark 2.1.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, it's possible for a malicious user to construct a URL pointing to a Spark cluster's UI's job and stage info pages, and if a user can be tricked into accessing the URL, can be used to cause script to execute and expose information from the...

CVE-2018-8024: Exposure of Sensitive Information to an Unauthorized Actor

In Apache Spark 2.1.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, it's possible for a malicious user to construct a URL pointing to a Spark cluster's UI's job and stage info pages, and if a user can be tricked into accessing the URL, can be used to cause script to execute and expose information from the...

PT-2018-18389

Name of the Vulnerable Software and Affected Versions: Apache Spark versions 2.1.0 through 2.1.2 Apache Spark versions 2.2.0 through 2.2.1 Apache Spark version 2.3.0 Description: A malicious user can construct a URL pointing to a Spark cluster's UI's job and stage info pages. If a user is tricked...

job-search.mucc.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-644662 Description| Value ---|--- Affected Website:| job-search.mucc.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-13192

The mintToken function of a smart contract implementation for Jobscoin JOB, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...