bibliotheques-specialisees.paris.fr XSS vulnerability

Open Bug Bounty ID: OBB-270998 Description| Value ---|--- Affected Website:| bibliotheques-specialisees.paris.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

paris-express.com XSS vulnerability

Open Bug Bounty ID: OBB-250995 Description| Value ---|--- Affected Website:| paris-express.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

paris.cl XSS vulnerability

Open Bug Bounty ID: OBB-238676 Description| Value ---|--- Affected Website:| paris.cl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Schneider Electric Wonderware InduSoft Web Studio

CVSS v3 7.3 ATTENTION: Low skill level to exploit. Vendor: Schneider Electric Equipment: Wonderware InduSoft Web Studio Vulnerability: Incorrect Default Permissions AFFECTED PRODUCTS The following versions of Schneider Electric’s Wondeware InduSoft Web Studio are affected: Wonderware InduSoft Web...

paris.cl XSS vulnerability

Vulnerable URL: http://www.paris.cl/webapp/wcs/stores/servlet/SearchDisplay/"--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16695 VIP website status:| Yes Check paris.cl SSL...

institutkariteparis.com XSS vulnerability

Vulnerable URL: http://www.institutkariteparis.com/boutique/rechercheresultats.cfm?codelg=lgfr"-confirmOPENBUGBOUNTY-"&mot=lait...

paris-corget-notaires.fr XSS vulnerability

Vulnerable URL: http://www.paris-corget-notaires.fr/annonces-immobilieres-saone-et-loire.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13981496 VIP website status:| No Check...

Schneider Electric ClearSCADA

CVSS v3 7.5 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Schneider Electric Equipment: ClearSCADA Vulnerability: Improper Input Validation AFFECTED PRODUCTS The following versions of ClearSCADA, server and communications driver processes, are affected: All supported version...

univ-paris-diderot.fr XSS vulnerability

Vulnerable URL: http://www.univ-paris-diderot.fr/sc/site.php?bc=%22%3E%3Cscript%3Ealert/OPENBUGBOUNTY/%3C/script%3E=CPGE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 33577 VIP...

Schneider Electric Conext ComBox

CVSS v3 7.5 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Schneider Electric Equipment: Conext ComBox Vulnerability: Resource Exhaustion AFFECTED PRODUCTS Schneider Electric reports that the vulnerability affects the following Conext ComBox solar battery monitor: Conext...

Lithium Forum Server-Side Request Forgery

Document Title: =============== Lithium Forum - Compose Message SSRF Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2030 Release Date: ============= 2017-02-20 Vulnerability Laboratory ID VL-ID: ==================================== 2030...

paris.notaires.fr XSS vulnerability

Vulnerable URL: http://www.paris.notaires.fr/sites/all/modules/DSI/annuaireIDF/ficheetude.ajax.php?id=92003〈=%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:|...

paris-sorbonne.fr XSS vulnerability

Vulnerable URL: http://www.paris-sorbonne.fr/les-actualites?formagendasearch=%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3Eagendasubmitlibre=Validermode=calculagendaresultats Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 09:44 GMT...

paris-express.com XSS vulnerability

Vulnerable URL: http://www.paris-express.com/search?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6527729 VIP website status:| No Check paris-express.com SSL connection:| Grad...

paris-sorbonne.hosted.exlibrisgroup.com XSS vulnerability

Vulnerable URL:...

next.paris.fr XSS vulnerability

Vulnerable URL: http://next.paris.fr/portail/accueil/Portal.lut?send=// Details: Description| Value ---|--- Patched:| Yes, at 30.03.2017 Latest check for patch:| 30.03.2017 15:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websit...

medecine.parisdescartes.fr XSS vulnerability

Vulnerable URL: http://www.medecine.parisdescartes.fr/index.php Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 22:41 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status...

Schneider Electric Magelis HMI Resource Consumption Vulnerabilities (Update B)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-16-308-02A Schneider Electric Magelis HMI Resource Consumption Vulnerabilities that was published November 22, 2016, on the NCCIC/ICS-CERT web site. ICS-CERT is aware of a public report of resource consumption...

didel.script.univ-paris-diderot.fr XSS vulnerability

Vulnerable URL: http://didel.script.univ-paris-diderot.fr/claroline/backends/download.php?url=aHR0cDovL2cuZTxzdmcgb25sb2FkPWFsZXJ0KCJYU1NQT1NFRCIpPg==%3D%3D=true=GOOGLESCHOLA Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:11 GMT Vulnerabili...

Paris Rex - Dangerous filesystem permissions, Insecure KeyStore, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Paris Rex published at the 'play' market has multiple vulnerabilities...