CVE-2018-11487: Improper Neutralization of Input During Web Page Generation

PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the query string to news.php or about.php...

veryquiet.com XSS vulnerability

Open Bug Bounty ID: OBB-613307 Description| Value ---|--- Affected Website:| veryquiet.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

veryquiet.com XSS vulnerability

Open Bug Bounty ID: OBB-605696 Description| Value ---|--- Affected Website:| veryquiet.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

arnd.nl XSS vulnerability

Open Bug Bounty ID: OBB-602651 Description| Value ---|--- Affected Website:| arnd.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mimorealtor.com XSS vulnerability

Open Bug Bounty ID: OBB-566347 Description| Value ---|--- Affected Website:| mimorealtor.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

gatbik.com XSS vulnerability

Open Bug Bounty ID: OBB-566336 Description| Value ---|--- Affected Website:| gatbik.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-15732

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/news.php...

CVE-2017-15732: Cross-Site Request Forgery (CSRF)

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/news.php...

projectcentre.co.uk XSS vulnerability

Vulnerable URL: http://www.projectcentre.co.uk/news.php?id=13'"68 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3319606 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

weelko.com XSS vulnerability

Vulnerable URL: http://www.weelko.com/news.php?lang=ITA=apleasurecosmobeautybarcelona=13'"71 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2127399 VIP website status:| No...

ysgolplasbrondyffryn.co.uk XSS vulnerability

Vulnerable URL: http://www.ysgolplasbrondyffryn.co.uk/news.php?id=13'"87 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline:...

sunflowercet.edu.in XSS vulnerability

Vulnerable URL: http://sunflowercet.edu.in/latest-news.php/%3C!%27/!%22/!/%27//%22/--!%3E%3CInput/Type=Text%20AutoFocus%20/;%20OnFocus=confirmOPENBUGBOUNTY%20//%3E%3CSvg%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.12.2017 Vulnerability type:| XSS Vulnerability...

healpro.com.pk XSS vulnerability

Vulnerable URL: http://healpro.com.pk/news.php?id=1"';alertString.fromCharCode88,83,83...

iecgy.inje.ac.kr XSS vulnerability

Vulnerable URL: http://iecgy.inje.ac.kr/community/news.php/'%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E?wrno=884 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

maujeh.com.tw XSS vulnerability

Vulnerable URL: http://maujeh.com.tw/news/news.php?class1=&class2;=&class3;==title= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 20.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

vdi-yauyu.com.tw XSS vulnerability

Vulnerable URL: http://www.vdi-yauyu.com.tw/news/news.php?class1=&class2;=&class3;==title= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 20.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

soja-stamping.com XSS vulnerability

Vulnerable URL: http://soja-stamping.com/news/news.php?class1=&class2;=&class3;==title=d3v Details: Description| Value ---|--- Patched:| No Latest check for patch:| 20.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

e107 v2 Bootstrap CMS - Cross Site Scripting Vulnerability

Document Title: =============== e107 v2 Bootstrap CMS - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2082 Release Date: ============= 2017-07-03 Vulnerability Laboratory ID VL-ID: ===================================...

e107 v2 Bootstrap CMS - Cross Site Scripting Vulnerability

Document Title: =============== e107 v2 Bootstrap CMS - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2082 Release Date: ============= 2017-07-02 Vulnerability Laboratory ID VL-ID: ===================================...

center4tech.com XSS vulnerability

Open Bug Bounty ID: OBB-218138 Description| Value ---|--- Affected Website:| center4tech.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...