CVE-2011-4068

PacketFence before 3.0.2 is affected by an authentication bypass in the check_password function (html/admin/login.php). An unauthenticated remote attacker can bypass login with an empty password, gaining access to the system. Multiple sources reference PacketFence

CVE-2018-5979

SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field...

ndm.anmw.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-526480 Description| Value ---|--- Affected Website:| ndm.anmw.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

atherton.net XSS vulnerability

Open Bug Bounty ID: OBB-521640 Description| Value ---|--- Affected Website:| atherton.net Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosur...

CVE-2017-17970

Multiple SQL injection vulnerabilities in Muviko 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 email parameter to login.php; the 2 seasonid parameter to themes/flixer/ajax/loadseason.php; the 3 movieid parameter to themes/flixer/ajax/getrating.php; the 4 rating or 5 movie...

Muviko 1.1 SQL Injection

Exploit Title: Muviko 1.1 - Multiple SQL Injection Exploit Author: Ahmad Mahfouz Contact: http://twitter.com/eln1x Date: 09/01/2018 CVE: CVE-2017-17970 Vendor Homepage: https://www.muvikoscript.com Version: 1.1 Tested on: Mac OS...

Muviko 1.1 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Muviko 1.1 - Multiple SQL Injection Exploit Author: Ahmad Mahfouz Contact: http://twitter.com/eln1x Date: 09/01/2018 CVE: CVE-2017-17970 Vendor Homepage: https://www.muvikoscript.com Version: 1.1 Tested on: Mac OS...

terrasim.com XSS vulnerability

Open Bug Bounty ID: OBB-490284 Description| Value ---|--- Affected Website:| terrasim.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based ...

imperfectproduce.com XSS vulnerability

Open Bug Bounty ID: OBB-484990 Description| Value ---|--- Affected Website:| imperfectproduce.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

plotexchange.com XSS vulnerability

Open Bug Bounty ID: OBB-484358 Description| Value ---|--- Affected Website:| plotexchange.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

padigift.com XSS vulnerability

Open Bug Bounty ID: OBB-472343 Description| Value ---|--- Affected Website:| padigift.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

www3.kandagaigo.ac.jp XSS vulnerability

Open Bug Bounty ID: OBB-467077 Description| Value ---|--- Affected Website:| www3.kandagaigo.ac.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

constructingskills.com.au XSS vulnerability

Open Bug Bounty ID: OBB-461661 Description| Value ---|--- Affected Website:| constructingskills.com.au Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventi...

babacarrental.com XSS vulnerability

Open Bug Bounty ID: OBB-459366 Description| Value ---|--- Affected Website:| babacarrental.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

ignycsm.com XSS vulnerability

Open Bug Bounty ID: OBB-459363 Description| Value ---|--- Affected Website:| ignycsm.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

nregsburdwan.com XSS vulnerability

Open Bug Bounty ID: OBB-459353 Description| Value ---|--- Affected Website:| nregsburdwan.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

taaol.com XSS vulnerability

Open Bug Bounty ID: OBB-459030 Description| Value ---|--- Affected Website:| taaol.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

admin.julienews.it XSS vulnerability

Open Bug Bounty ID: OBB-458183 Description| Value ---|--- Affected Website:| admin.julienews.it Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

genkan.com.au XSS vulnerability

Open Bug Bounty ID: OBB-456193 Description| Value ---|--- Affected Website:| genkan.com.au Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

serplab.co.uk XSS vulnerability

Vulnerable URL: https://www.serplab.co.uk/process/login.php Details: Description| Value ---|--- Patched:| Yes, at 20.12.2017 Latest check for patch:| 20.12.2017 10:36 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16685 VIP website status:| Yes Coordinated...