147 matches found
Password Reset Landing Page (PRLP) - Highly critical - Access bypass - SA-CONTRIB-2020-021
This module enables you to force a password update when using password reset link. The module doesn't sufficiently validate the login URL allowing a malicious user to use a specially crafted URL to log in as another user...
CVE-2019-9206
PRTG Network Monitor v7.1.3.3378 allows XSS via the /public/login.htm errormsg or loginurl parameter. NOTE: This product is discontinued...
DRUPAL-CONTRIB-2019-075
Open Social is a Drupal distribution for online communities. The included social\magic\login module doesn't sufficiently validate magic login URLs for user accounts that do not have a local password, but login via external systems. The lack of validation makes it possible for an adversary to forg...
WordPress login-or-logout-menu-item plugin redirection vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. login-or-logout-menu-item is used in one of the website user login/logout function plugin. A security vulnerability exists...
CVE-2019-10676
An issue was discovered in Uniqkey Password Manager 1.14. Upon entering new credentials to a site that is not registered within this product, a pop-up window will appear prompting the user if they want to save this new password. This pop-up window will persist on any page the user enters within t...
WordPress Cerber Security Antispam & Malware Scan 8.0 Plugin - Multiple Bypass Vulnerabilities
Exploit for php platform in category web applications Exploit Title: WordPress Cerber Security, Antispam & Malware Scan - Multiple Bypass Vulnerabilities Type: WordPress Plugin Active installs: 100,000+ Version: 8.0 Software Link: https://wordpress.org/plugins/wp-cerber/ Exploit Author: ed0x21son...
cbsurge.com XSS vulnerability
Open Bug Bounty ID: OBB-655683 Description| Value ---|--- Affected Website:| cbsurge.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
caritas-ms.de XSS vulnerability
Open Bug Bounty ID: OBB-652791 Description| Value ---|--- Affected Website:| caritas-ms.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-11553
SGIN.CN xiangyun platform V9.4.10 has XSS via the loginurl parameter to /login.php...
vitamin.net.au XSS vulnerability
Open Bug Bounty ID: OBB-611032 Description| Value ---|--- Affected Website:| vitamin.net.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
skridsko.net XSS vulnerability
Open Bug Bounty ID: OBB-610730 Description| Value ---|--- Affected Website:| skridsko.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ephotozine.com XSS vulnerability
Open Bug Bounty ID: OBB-596549 Description| Value ---|--- Affected Website:| ephotozine.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
cs.renault-club.cz XSS vulnerability
Open Bug Bounty ID: OBB-568892 Description| Value ---|--- Affected Website:| cs.renault-club.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
bdtnp.lbl.gov XSS vulnerability
Open Bug Bounty ID: OBB-552125 Description| Value ---|--- Affected Website:| bdtnp.lbl.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
claudiapenasalinas.com XSS vulnerability
Open Bug Bounty ID: OBB-484319 Description| Value ---|--- Affected Website:| claudiapenasalinas.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...
wilsonwalkercanada.com XSS vulnerability
Open Bug Bounty ID: OBB-284232 Description| Value ---|--- Affected Website:| wilsonwalkercanada.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
elect-mer.com XSS vulnerability
Vulnerable URL: https://www.elect-mer.com/cart/login.php?ContinueURL=1"...
Auto Login URL - Less Critical - Access Bypass - DRUPAL-SA-CONTRIB-2017-034
This module lets you create auto login URLs programmatically on demand and through tokens. The module does not provide sufficient protection when generating login URLs. An attacker could rebuild login URLs independently thereby logging in as another user. This vulnerability is mitigated by the fa...
Irancell WIMAX Modem WIXFMM-130 CSRF Accounting User Password Viewer Vulnerability
Exploit for cgi platform in category web applications Exploit Title: Irancell WIMAX Modem WIXFMM-130 CSRF Accounting User Password Viewer Vendor Homepage: http://wimax.irancell.ir/Portal/Home/ Version: WIXFMM-130 Exploit : http://192.168.1.1/ajax.cgi?action=taginitwimaxauth.php Result :...