family.tgifridays.co.uk XSS vulnerability

Vulnerable URL: https://family.tgifridays.co.uk/search?actions=search%2Fmap=%22%3E%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3C%2Fscript%3E%3Cdiv+id%3D%22=10 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Public...

CVE-2016-6209

A user supplied GET parameter is used to create the value used as the src value of an iframe displayed on all pages. It allows for CSRF and javascript insertion techniques among others. An attacker could forge a malicious URL that could include javascript execution in the main browser frame...

Soars-government system /TSPB/web/xzzx/xzzx. jsp parameter parentid SQL injection vulnerability

No description provided by source...

Dswjcms Lib/Action/Admin/BasisAction.class.php id parameter, etc. 9 SQL injection

No description provided by source...

Starbucks: Parameter Manipulation allowed for editing the shipping address for other user’s teavana.com subscriptions.

@meals discovered a vulnerability which allowed the shipping address for teavana.com order subscriptions to be edited without proper authorization. Thanks @meals!...

Starbucks: Parameter Manipulation allowed for viewing of other user’s teavana.com orders

A vulnerability had existed which allowed for unauthorized viewing of order details belonging to other users. @meals delivered a solid report & worked with us to resolve the issue. Thanks @meals! Proper authorization checks were not done on a specific parameter that allowed any user on teavana.co...

科创CMS tpgl.jsp 参数chid SQL注入漏洞

利用payload： http://xxx/commfront/baixian/tpgl.jsp?chid=9076' AND 1067=SELECT UPPERXMLTypeCHR60||CHR58||CHR113||CHR120||CHR98||CHR120||CHR113||REPLACEREPLACEREPLACEREPLACESELECT NVLCASTUSER AS VARCHAR4000,CHR32 FROM...

Zend Framework < 2.0.8 / 2.1.x < 2.1.4 Multiple Vulnerabilities

Binary data 9146.prm...

ManageEngine EventLog Analyzer 10.8 Privilege Escalation

ManageEngine EventLog Analyzer v10.8 Date: 2/9/2016 Exploit Author: @GraphX Vendor Homepage: http://www.manageengine.com Version: 10.8 1 Description: It is possible for a remote authenticated attacker using an unprivileged account to gain access to the admin account via parameter manipulation usi...

Deliberately Insecure Web Application: OWASP WebGoat

WebGoat is a deliberately insecure web application maintained by OWASP designed to teach web application security lessons. You can install and practice with WebGoat in either J2EE or WebGoat for .Net in ASP.NET. In each lesson, users must demonstrate their understanding of a security issue by...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in X2Engine X2CRM before 5.0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 version parameter in protected/views/admin/formEditor.php; the 2 importId parameter in protected/views/admin/rollbackImport.php; the 3 bc, 4 fg,...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in pfSense before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 srctrack, 2 usemfstmpsize, or 3 usemfsvarsize parameter to systemadvancedmisc.php; the 4 port, 5 snaplen, or 6 count parameter to diagpacketcapture.php...

Concrete CMS: Multiple XSS Vulnerabilities in Concrete5 5.7.3.1

Proof of Concept URLs for XSS in Concrete5: URL: /concrete5.7.3.1/index.php/dashboard/system/conversations/bannedwords/success Parameter Name: bannedword%5b%5d Parameter Type: POST Attack Pattern: '"--alert0x000936 URL:...

CVE-2011-5287

Multiple cross-site scripting XSS vulnerabilities in HESK before 2.4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 hesksettingstmptitle or 2 hesklangENCODING parameter to inc/header.inc.php; the hesklangattempt parameter to 3 inc/assignmentsearch.inc.php, 4...

Work The Flow File Upload < 2.4 - wp-admin/admin-ajax.php accept_file_types Parameter Manipulation File Upload Restriction Bypass

See https://github.com/wpscanteam/wpscan/issues/673issuecomment-53972233...

TinyShop二次注入一枚。

简要描述： rt TinyShop v1.0.2 详细说明： 还是 protected\controllers\simple.php文件 public function orderact ................. $address = $model-table"address"-where"id=$addressid"-find; //if!$address$this-redirect"order",false,Req::args; //if!$paymentid$this-redirect"order",false,Req::args; $data'orderno' =...

IBM OmniFind Crawler Denial of Service Vulnerability

No description provided by source. Crawler endless loop CVE-2010-3899 The crawler has no recursion depth limit. A site with dynamic parameter manipulation can cause an endless loop. This loop will block the crawler thread and use permanent server resources. Too many blocks can lead to a denial of...

DCP-Portal 3.7/4.x/5.x/6.x mycontents.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/17050/info DCP Portal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...

Axous 1.1.1 - Multiple Vulnerabilities (CSRF - Persistent XSS)

No description provided by source. +-----------------------------------------------------------------------------------------------------------+ Exploit Title : Axous 1.1.1 Multiple Vulnerabilities CSRF - Persistent XSS Date : 30-04-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software...

C-News 1.0.1 - 'install.php' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28989/info C-News is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...