XSS vulnerabililty in the front end "unsubscribe" module of the newsletter extension

More info at https://contao.org/en/news/contao-3532.html...

SQL injection in the newsletter module

Date : 2018-01-18 CVE ID : CVE-2018-5478 Description The vulnerability is in the "unsubscribe" module of the newsletter extension. It can easily be exploited by anyone without logging in in the front end. Affected versions Contao 3. up to 3.5.31 Suggested solution Update to Contao 3.5.32...

ofertasybonos.com XSS vulnerability

Open Bug Bounty ID: OBB-515739 Description| Value ---|--- Affected Website:| ofertasybonos.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jbsautodesigns.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-515719 Description| Value ---|--- Affected Website:| jbsautodesigns.co.uk Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

fascicules.fr XSS vulnerability

Open Bug Bounty ID: OBB-483251 Description| Value ---|--- Affected Website:| fascicules.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based...

StivaSoft PHPJabbers PHP Newsletter Script Cross-Site Scripting Vulnerability

StivaSoft PHPJabbers PHP Newsletter Script is a set of news system scripts from the Bulgarian company StivaSoft. admin panel is one of the administration panels. A cross-site scripting vulnerability exists in the lists of the admin panel of StivaSoft PHPJabbers PHP Newsletter Script. A remote...

CVE-2017-12810

PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel...

CVE-2017-12810

PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel...

Cross site scripting

PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel...

CVE-2017-12810

PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel...

CVE-2017-12810

PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel...

CVE-2017-12810

Summary (CVE-2017-12810): PHPJabbers PHP Newsletter Script 4.2 contains a stored XSS vulnerability in the admin panel’s lists. Multiple sources (NVD and CNVD) describe a cross-site scripting flaw that allows an attacker to inject arbitrary script when exploiting the vulnerable lists in the admin ...

regiaonorte.net XSS vulnerability

Open Bug Bounty ID: OBB-456778 Description| Value ---|--- Affected Website:| regiaonorte.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

modern-chess.com XSS vulnerability

Open Bug Bounty ID: OBB-454822 Description| Value ---|--- Affected Website:| modern-chess.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

vithulpbijmantelzorg.nl XSS vulnerability

Open Bug Bounty ID: OBB-453600 Description| Value ---|--- Affected Website:| vithulpbijmantelzorg.nl Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

empa-newsletter.ch Open Redirect vulnerability

Open Bug Bounty ID: OBB-432108 Description| Value ---|--- Affected Website:| empa-newsletter.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

wala.de XSS vulnerability

Open Bug Bounty ID: OBB-417314 Description| Value ---|--- Affected Website:| wala.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

osCommerce 2.3.4.1 - Arbitrary File Upload

Exploit Title: osCommerce 2.3.4.1 Authenticated Arbitrary File Upload Date: 11.11.2017 Exploit Author: Simon Scannell - https://scannell-infosec.net Vendor Homepage: https://www.oscommerce.com/ Software Link: https://www.oscommerce.com/Products&Download=oscom234 Version: 2.3.4.1, 2.3.4 - Other...

proplanta.de XSS vulnerability

Open Bug Bounty ID: OBB-395133 Description| Value ---|--- Affected Website:| proplanta.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

pinkmilk.de XSS vulnerability

Open Bug Bounty ID: OBB-378270 Description| Value ---|--- Affected Website:| pinkmilk.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...