southbayballet.org XSS vulnerability

Vulnerable URL: http://southbayballet.org/photo-gallery.php?id=38%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Ktools Photostore 4.7.5 - Multiple Vulnerabilities

Exploit for php platform in category web applications -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Ktools Photostore = 4.7.5 Multiple Vulnerabilities Bug discovered by Yakir Wizman Date 01/07/2016 Affected versions prior to 4.7.5 Vendor Homepage - http://www.ktools.net...

Ktools Photostore 4.7.5 - Multiple Vulnerabilities

Ktools Photostore 4.7.5 - Multiple Vulnerabilities -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Ktools Photostore = 4.7.5 Multiple Vulnerabilities Bug discovered by Yakir Wizman Date 01/07/2016 Affected versions prior to 4.7.5 Vendor Homepage - http://www.ktools.net...

WordPress WP Photo Album Plus Plugin <= 5.4.4 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability. Solution Update the plugin...

PHPFox 4 Cross Site Scripting

Title : PhpFox4 Cross Site Scripting Vuln. Author : bl4ckMohajeM [email protected] Software Link: http://www.phpfox.com/ Version: 4 Date : 06/09/2016 Category: WebApps Tested with : Ubuntu / Win Description In this Cms theres is a Cross Site Scripting Vurlnerablities in 'nsextt' Parameter...

CVE-2016-1852

Siri in Apple iOS before 9.3.2 does not block data detectors within results in the lock-screen state, which allows physically proximate attackers to obtain sensitive contact and photo information via unspecified vectors...

wishafriend.com XSS vulnerability

Vulnerable URL: http://www.wishafriend.com/photo/photoframes/uploadphoto.php?frame=halloween21%22--%3E%3C/script%3E%3Csvg/onload=%27;alert%28/OPENBUGBOUNTY/%29;%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status...

WordPress Simple Photo Gallery Plugin <= 1.8.0 - Stored Cross Site Scripting

Because of this vulnerability, attackers can execute malicious cides on name input of the gallery and album. Solution Update the plugin...

WordPress Simple Photo Gallery Plugin <= 1.8.0 - Stored Cross Site Scripting

Because of this vulnerability, attackers can execute malicious cides on name input of the gallery and album. Solution Update the plugin...

WordPress Google SEO Pressor Snippet Plugin <= 1.2.6 - Reflected XSS

This plugin is prone to a reflected cross site scripting vulnerability, because these parameters are not sanitized: "Address Region", "Longitude", "Latitude", "Event type", "Offer aggregate", "Low Price", "High Price", "Offer Url", "Price", "Events Website", "Offer Quantity", "Price valid Until",...

Photo Editor Collage Maker Pro - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Photo Editor Collage Maker Pro published at the 'play' market has multiple vulnerabilities...

UBUNTU-CVE-2016-2533

Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library PIL 1.1.7 and earlier allows remote attackers to cause a denial of service crash via a crafted PhotoCD file...

WordPress Easy Photo Album Plugin <= 1.1.5 - Information Disclosure

This plugin is prone to an information disclosure vulnerability. Solution Update the plugin...

WordPress Easy Photo Album Plugin <= 1.1.5 - Information Disclosure

This plugin is prone to an information disclosure vulnerability. Solution Update the plugin...

CVE-2016-1175

Cross-site request forgery CSRF vulnerability in AQUOS Photo Player HN-PP150 1.02.00.04 through 1.03.01.04 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2016-1175

Cross-site request forgery CSRF vulnerability in AQUOS Photo Player HN-PP150 1.02.00.04 through 1.03.01.04 allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in AQUOS Photo Player HN-PP150 1.02.00.04 through 1.03.01.04 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2016-1175

CVE-2016-1175 affects Sharp AQUOS Photo Player HN-PP150 (versions 1.02.00.04–1.03.01.04). The vulnerability is a cross-site request forgery (CSRF) that allows remote attackers to hijack user authentication and potentially alter settings when a logged-in user visits a malicious page. Root cause: i...

CVE-2016-1175

Cross-site request forgery CSRF vulnerability in AQUOS Photo Player HN-PP150 1.02.00.04 through 1.03.01.04 allows remote attackers to hijack the authentication of arbitrary users...

AQUOS Photo Player HN-PP150 vulnerable to cross-site request forgery

Overview AQUOS Photo Player HN-PP150 provided by Sharp Corporation contains a cross-site request forgery vulnerability CWE-352. Junichi MURAKAMI of FFRI, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact ...