thesimszone.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-586276 Description| Value ---|--- Affected Website:| thesimszone.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mymancosa.com XSS vulnerability

Open Bug Bounty ID: OBB-582612 Description| Value ---|--- Affected Website:| mymancosa.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

restauranttester.at XSS vulnerability

Open Bug Bounty ID: OBB-571751 Description| Value ---|--- Affected Website:| restauranttester.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

evodragon.net XSS vulnerability

Open Bug Bounty ID: OBB-567759 Description| Value ---|--- Affected Website:| evodragon.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

rebeca.ir XSS vulnerability

Open Bug Bounty ID: OBB-565016 Description| Value ---|--- Affected Website:| rebeca.ir Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on...

accounts.zaretti.com XSS vulnerability

Open Bug Bounty ID: OBB-556146 Description| Value ---|--- Affected Website:| accounts.zaretti.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

anlp.org XSS vulnerability

Open Bug Bounty ID: OBB-556138 Description| Value ---|--- Affected Website:| anlp.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dialostandfound.com XSS vulnerability

Open Bug Bounty ID: OBB-556137 Description| Value ---|--- Affected Website:| dialostandfound.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cndoil.ca XSS vulnerability

Open Bug Bounty ID: OBB-554696 Description| Value ---|--- Affected Website:| cndoil.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

infomed.ch XSS vulnerability

Open Bug Bounty ID: OBB-552096 Description| Value ---|--- Affected Website:| infomed.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Authentication flaw

The checkpassword function in html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to bypass authentication via an empty password...

CVE-2011-4068

PacketFence before 3.0.2 is affected by an authentication bypass in the check_password function (html/admin/login.php). An unauthenticated remote attacker can bypass login with an empty password, gaining access to the system. Multiple sources reference PacketFence

CVE-2011-4069: Improper Neutralization of Special Elements used in an LDAP Query

html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to conduct LDAP injection attacks and consequently bypass authentication via a crafted username...

CVE-2011-4068: Improper Authentication

The checkpassword function in html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to bypass authentication via an empty password...

CVE-2018-5979

SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field...

CVE-2018-5979: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field...

CVE-2018-5978: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Facebook Style Php Ajax Chat Zechat 1.5 via the login.php User field...

ndm.anmw.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-526480 Description| Value ---|--- Affected Website:| ndm.anmw.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

atherton.net XSS vulnerability

Open Bug Bounty ID: OBB-521640 Description| Value ---|--- Affected Website:| atherton.net Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosur...

CVE-2017-17970

Multiple SQL injection vulnerabilities in Muviko 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 email parameter to login.php; the 2 seasonid parameter to themes/flixer/ajax/loadseason.php; the 3 movieid parameter to themes/flixer/ajax/getrating.php; the 4 rating or 5 movie...