vegaauto.co.th XSS vulnerability

Vulnerable URL: http://www.vegaauto.co.th/product.php?IDcatalog=1%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Type=Text%20AutoFocus%20/;%20OnFocus=alertOPENBUGBOUNTY%20//%3E%3CSvg%3E=79 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 22.11.2017...

CVE-2017-11317

CVE-2017-11317 affects Telerik Web UI for ASP.NET AJAX prior to R1 2017 and R2 prior to R2 2017 SP2. The issue is a weak encryption/serialization flaw in RadAsyncUpload that enables remote attackers to upload arbitrary files or execute arbitrary code. The root cause is described as a deserializat...

CVE-2017-11317

Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code...

CVE-2017-11357

Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code...

CVE-2017-11357

CVE-2017-11357 affects Progress Telerik UI for ASP.NET AJAX; RadAsyncUpload input is not properly restricted, enabling remote attackers to upload arbitrary files or trigger code execution. The vulnerability is described as an insecure direct object reference in RadAsyncUpload, with impact stated ...

boiteachansons.net XSS vulnerability

Vulnerable URL: http://www.boiteachansons.net/Partitions/The-Byrds/Turn-Turn-Turn.php/%22%3Eblub%3Csvg/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 21.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicl...

sec.ro XSS vulnerability

Vulnerable URL: http://sec.ro/hu/forms/formnewslettermailchimp.php Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 22.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16187960 VIP website status:| No Check sec.r...

CVE-2017-11357

Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker...

Progress Sitefinity 9.1 XSS Vulnerability

Progress Sitefinity version 9.1 suffers from cross site scripting, broken session management, and open redirection vulnerabilities. ======================================================================= title: Multiple vulnerabilities product: Progress Sitefinity vulnerable version: 9.1 fixed...

Progress Sitefinity 9.1 XSS / Session Management / Open Redirect

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Progress Sitefinity vulnerable version: 9.1 fixed version: 10.1 CVE number: - impact: High homepage: http://www.sitefinity.com |...

xylect.com Open Redirect vulnerability

Vulnerable URL: http://www.xylect.com/html/wait.asp?startup=1=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 19.11.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 465608 VI...

guardian-bank.com XSS vulnerability

Vulnerable URL: http://guardian-bank.com/about-us/" Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 19.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6424772 VIP website status:| No Check guardian-bank.com SSL...

thelabradorclub.com XSS vulnerability

Vulnerable URL: http://www.thelabradorclub.com/subpages/showcontents.php?page=AKC+Title+Lists" Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1217566 VIP...

businessbanking.bankofireland.com XSS vulnerability

Vulnerable URL: https://businessbanking.bankofireland.com/business-supports/sectors/" Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

personalbanking.bankofireland.com XSS vulnerability

Vulnerable URL: https://personalbanking.bankofireland.com/insure-and-protect/protection/mortgage-protection/about/" Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

icelandair.is XSS vulnerability

Vulnerable URL: http://www.icelandair.is/search/?q=1%3C!%27/%22/%27/%22/--%3E%3C/Script/%3E%3CScript%3Econfirm/OPENBUGBOUNTY/%3C/Script/%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:|...

herb-devil.com XSS vulnerability

Vulnerable URL: http://herb-devil.com/tagproducts.php?idtag=41'" Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| ...

arg-agro.com.ar XSS vulnerability

Vulnerable URL: http://www.arg-agro.com.ar/tagproducts.php?idtag=51'" Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1217814 VIP website status:| No Check...

ezywhip.com.au XSS vulnerability

Vulnerable URL: http://www.ezywhip.com.au/tagproducts.php?idtag=62'"=en Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13984441 VIP website status:| No...

nostalgieshop.net XSS vulnerability

Vulnerable URL: https://www.nostalgieshop.net/tagproducts.php/en?idtag=714%27%22%3E%3Cmarquee/onstart=%20prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 15.11.2017 Vulnerability type:| XSS Vulnerability status:| Public...