searchmyanmar.com XSS vulnerability

Open Bug Bounty ID: OBB-580163 Description| Value ---|--- Affected Website:| searchmyanmar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

catalogo.portacabos.com.br XSS vulnerability

Open Bug Bounty ID: OBB-571837 Description| Value ---|--- Affected Website:| catalogo.portacabos.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

adnkronos.com XSS vulnerability

Open Bug Bounty ID: OBB-552437 Description| Value ---|--- Affected Website:| adnkronos.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-6581

SQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the keyword, artist, or username parameter...

CVE-2018-6581: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the keyword, artist, or username parameter...

Joomla! Component JMS Music 1.1.1 - SQL Injection

Joomla! Component JMS Music 1.1.1 - SQL Injection Exploit Title: Joomla! Component JMS Music 1.1.1 - SQL Injection Dork: N/A Date: 01.02.2018 Vendor Homepage: https://www.joommasters.com/ Software Link: https://extensions.joomla.org/extensions/extension/multimedia/multimedia-players/jms-music/...

PT-2018-17645

Name of the Vulnerable Software and Affected Versions JMS Music version 1.1.1 Description The issue exists due to SQL Injection in the JMS Music component for Joomla, which can be exploited via a search using the keyword, artist, or username parameter. Recommendations For JMS Music version 1.1.1,...

intra.phiconnect.com XSS vulnerability

Open Bug Bounty ID: OBB-511732 Description| Value ---|--- Affected Website:| intra.phiconnect.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Design/Logic Flaw

Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter...

CVE-2018-5072

Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter...

CVE-2018-5072

Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter...

CVE-2018-5072: Improper Neutralization of Input During Web Page Generation

Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter...

PT-2018-16764

Name of the Vulnerable Software and Affected Versions Online Ticket Booking affected versions not specified Description The issue concerns an XSS vulnerability via the keyword parameter in the "admin/sitesettings.php" API endpoint. Recommendations For all affected versions, consider restricting...

usfca.edu XSS vulnerability

Open Bug Bounty ID: OBB-466666 Description| Value ---|--- Affected Website:| usfca.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

CVE-2017-17896

Readymade Job Site Script has XSS via the keyword parameter to the /job URI...

CVE-2017-17896

Readymade Job Site Script has XSS via the keyword parameter to the /job URI...

CVE-2017-17896: Improper Neutralization of Input During Web Page Generation

Readymade Job Site Script has XSS via the keyword parameter to the /job URI...

PHP Scripts Mall Readymade Job Site Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Readymade Job Site Script is a PHP based job site script by PHP Scripts Mall India. The script includes features like job management, profile management and email notifications. A cross-site scripting vulnerability exists in PHP Scripts Mall Readymade Job Site Script. A remote...

CVE-2017-17896

CVE-2017-17896 affects Readymade Job Site Script with a cross-site scripting (XSS) vulnerability via the keyword parameter to the /job URI. The NVD entry reports a base score of 4.3 (CVSS2) and 6.1 (CVSS3), indicating that network access is required and user interaction is involved in a changed s...

PT-2017-15081

Name of the Vulnerable Software and Affected Versions Readymade Job Site Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. The /job URI is affected, specifically through the keyword parameter. Recommendations...