usfca.edu XSS vulnerability

Open Bug Bounty ID: OBB-466666 Description| Value ---|--- Affected Website:| usfca.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

CVE-2017-17896

Readymade Job Site Script has XSS via the keyword parameter to the /job URI...

CVE-2017-17896

Readymade Job Site Script has XSS via the keyword parameter to the /job URI...

CVE-2017-17896: Improper Neutralization of Input During Web Page Generation

Readymade Job Site Script has XSS via the keyword parameter to the /job URI...

PHP Scripts Mall Readymade Job Site Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Readymade Job Site Script is a PHP based job site script by PHP Scripts Mall India. The script includes features like job management, profile management and email notifications. A cross-site scripting vulnerability exists in PHP Scripts Mall Readymade Job Site Script. A remote...

CVE-2017-17896

CVE-2017-17896 affects Readymade Job Site Script with a cross-site scripting (XSS) vulnerability via the keyword parameter to the /job URI. The NVD entry reports a base score of 4.3 (CVSS2) and 6.1 (CVSS3), indicating that network access is required and user interaction is involved in a changed s...

PT-2017-15081

Name of the Vulnerable Software and Affected Versions Readymade Job Site Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. The /job URI is affected, specifically through the keyword parameter. Recommendations...

CVE-2017-17642

Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...

CVE-2017-17642

Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...

CVE-2017-17623

Opensource Classified Ads Script 3.2 has SQL Injection via the advanceresult.php keyword parameter...

Sql injection

Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...

CVE-2017-17623

Opensource Classified Ads Script 3.2 has SQL Injection via the advanceresult.php keyword parameter...

CVE-2017-17642

Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...

CVE-2017-17623

Opensource Classified Ads Script 3.2 is affected by a SQL Injection via the keyword parameter in advance_result.php. Multiple sources (NVD/CVE listings and CNVD/CVE records) confirm an injectable vulnerability in this version, with CVSS scores indicating HIGH/CRITICAL severity (NVD CVSS2: 7.5 HIG...

CVE-2017-17623: Improper Neutralization of Special Elements used in an SQL Command

Opensource Classified Ads Script 3.2 has SQL Injection via the advanceresult.php keyword parameter...

CVE-2017-17642: Improper Neutralization of Special Elements used in an SQL Command

Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...

CVE-2017-16955

SQL injection vulnerability in the InLinks plugin through 1.1 for WordPress allows authenticated users to execute arbitrary SQL commands via the "keyword" parameter to /wp-admin/options-general.php?page=inlinks/inlinks.php...

CVE-2017-16955

SQL injection vulnerability in the InLinks plugin through 1.1 for WordPress allows authenticated users to execute arbitrary SQL commands via the "keyword" parameter to /wp-admin/options-general.php?page=inlinks/inlinks.php...

CVE-2017-16955: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the InLinks plugin through 1.1 for WordPress allows authenticated users to execute arbitrary SQL commands via the "keyword" parameter to /wp-admin/options-general.php?page=inlinks/inlinks.php...

PT-2017-14657

Name of the Vulnerable Software and Affected Versions InLinks plugin versions through 1.1 for WordPress Description The issue allows authenticated users to execute arbitrary SQL commands. This is achieved via the "keyword" parameter to the "/wp-admin/options-general.php?page=inlinks/inlinks.php"...