sedalia200.org XSS vulnerability

Vulnerable URL: http://www.sedalia200.org/education/components/search/search.php?search=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E==8027=1= Details: Description| Value ---|--- Patched:| Yes, at 03.12.2015 Latest check for patch:| 03.12.2015 07:25 GMT Vulnerability type:| XSS...

lisle202.org XSS vulnerability

Vulnerable URL: http://www.lisle202.org/cs/forgot.v Details: Description| Value ---|--- Patched:| Yes, at 29.11.2015 Latest check for patch:| 29.11.2015 12:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 812049 Google Pagerank| 3 VIP website status:| No Check...

mendota289.org XSS vulnerability

Vulnerable URL: http://www.mendota289.org/cs/forgot.v Details: Description| Value ---|--- Patched:| Yes, at 29.11.2015 Latest check for patch:| 29.11.2015 12:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4398029 Google Pagerank| 3 VIP website status:| No...

usd492.org XSS vulnerability

Vulnerable URL: http://www.usd492.org/cs/forgot.v Details: Description| Value ---|--- Patched:| Yes, at 29.11.2015 Latest check for patch:| 29.11.2015 12:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18520382 Google Pagerank| 3 VIP website status:| No Check...

meridian223.org XSS vulnerability

Vulnerable URL: http://www.meridian223.org/cs/forgot.v Details: Description| Value ---|--- Patched:| Yes, at 29.11.2015 Latest check for patch:| 29.11.2015 12:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1144764 Google Pagerank| 3 VIP website status:| No...

CVE-2015-3837

CVE-2015-3837 affects Android’s OpenSSLX509Certificate class (org/conscrypt/OpenSSLX509Certificate.java) in builds prior to 5.1.1 LMY48I. The root cause is improper inclusion of certain context data during serialization and deserialization, enabling a malicious local application to trigger code e...

CVE-2015-3837: Improper Input Validation

The OpenSSLX509Certificate class in org/conscrypt/OpenSSLX509Certificate.java in Android before 5.1.1 LMY48I improperly includes certain context data during serialization and deserialization, which allows attackers to execute arbitrary code via an application that sends a crafted Intent, aka...

vod01.district196.org XSS vulnerability

Vulnerable URL: http://vod01.district196.org/SAFARI/montage/login/login.php?Error= Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

safari.iu13.org XSS vulnerability

Vulnerable URL: https://safari.iu13.org/SAFARI/montage/login/login.php?Error= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Goog...

safari.dpsk12.org XSS vulnerability

Vulnerable URL: http://safari.dpsk12.org/SAFARI/montage/login/login.php?Error= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

business.denton-chamber.org XSS vulnerability

Vulnerable URL: http://business.denton-chamber.org/directory/jsp/busdir/SearchResults.jsp Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 13:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

5mp3.org XSS vulnerability

Vulnerable URL: http://5mp3.org/index.php?music='"...

Immunity Canvas: FIREFOX_PDFJS_FILEREADER

Name| firefoxpdfjsfilereader ---|--- CVE| CVE-2015-4495 Exploit Pack| CANVAS Description| firefoxpdfjsfilereader Notes| CVE Name: CVE-2015-4495 VENDOR: Mozilla NOTES: Tested on: Ubuntu 14.04.3 LTS Firefox 39.0 Under the Response tab of ClientD main window, the option "Respond directly with exploi...

openSUSE Security Update : rubygem-jquery-rails (openSUSE-2015-501)

rubygem-jquery-rails was updated to fix one security issue. This security issue was fixed : - CVE-2015-1840: CSRF Vulnerability in jquery-ujs and jquery-rails bsc934795. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

某政务服务中心系统通用型任意文件下载

简要描述： 详细说明： 深圳太极软件有限公司开发系统比较多；这款是政务服务中心系统；存在任意文件下载漏洞;这个系统的案例实在太多，都不需要我多说了 任意文件下载： /servlet/fileOpenforms?filename=/WEB-INF/WEB.xml Case: http://...//servlet/fileOpenforms?filename=/WEB-INF/WEB.xml http://...//servlet/fileOpenforms?filename=/WEB-INF/WEB.xml...

iom.nationalacademies.org XSS vulnerability

Vulnerable URL: http://iom.nationalacademies.org/Global/Search.aspx?q=b4rt=xmlnodtd=iomfrontend=iom=1 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

pusdk12.org XSS vulnerability

Vulnerable URL: http://www.pusdk12.org/Site-Search/index.html?searchstring='&submit.x;=37&submit.y;=6 Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 09:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 27112...

northeast10.org XSS vulnerability

Open Bug Bounty ID: OBB-64506 Description| Value ---|--- Affected Website:| northeast10.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

utugo017.org XSS vulnerability

Vulnerable URL: http://www.utugo017.org/news.php?search=%3E%3C/title%3E%3Cscript%3Ealert%28KCF%29%3C/script%3E%27%22%3E%3Cmarquee%3E%3Ch1%3Etest%3C/h1%3E%3C/marquee%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:|...

dcwood.trade-world.org XSS vulnerability

Open Bug Bounty ID: OBB-58232 Description| Value ---|--- Affected Website:| dcwood.trade-world.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...