CVE-2017-11357

Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker...

Progress Sitefinity 9.1 XSS / Session Management / Open Redirect

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Progress Sitefinity vulnerable version: 9.1 fixed version: 10.1 CVE number: - impact: High homepage: http://www.sitefinity.com |...

xylect.com Open Redirect vulnerability

Vulnerable URL: http://www.xylect.com/html/wait.asp?startup=1=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 19.11.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 465608 VI...

guardian-bank.com XSS vulnerability

Vulnerable URL: http://guardian-bank.com/about-us/" Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 19.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6424772 VIP website status:| No Check guardian-bank.com SSL...

thelabradorclub.com XSS vulnerability

Vulnerable URL: http://www.thelabradorclub.com/subpages/showcontents.php?page=AKC+Title+Lists" Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1217566 VIP...

businessbanking.bankofireland.com XSS vulnerability

Vulnerable URL: https://businessbanking.bankofireland.com/business-supports/sectors/" Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

personalbanking.bankofireland.com XSS vulnerability

Vulnerable URL: https://personalbanking.bankofireland.com/insure-and-protect/protection/mortgage-protection/about/" Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

icelandair.is XSS vulnerability

Vulnerable URL: http://www.icelandair.is/search/?q=1%3C!%27/%22/%27/%22/--%3E%3C/Script/%3E%3CScript%3Econfirm/OPENBUGBOUNTY/%3C/Script/%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:|...

herb-devil.com XSS vulnerability

Vulnerable URL: http://herb-devil.com/tagproducts.php?idtag=41'" Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| ...

arg-agro.com.ar XSS vulnerability

Vulnerable URL: http://www.arg-agro.com.ar/tagproducts.php?idtag=51'" Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1217814 VIP website status:| No Check...

ezywhip.com.au XSS vulnerability

Vulnerable URL: http://www.ezywhip.com.au/tagproducts.php?idtag=62'"=en Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13984441 VIP website status:| No...

nostalgieshop.net XSS vulnerability

Vulnerable URL: https://www.nostalgieshop.net/tagproducts.php/en?idtag=714%27%22%3E%3Cmarquee/onstart=%20prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 15.11.2017 Vulnerability type:| XSS Vulnerability status:| Public...

ticoexpress.com.ar XSS vulnerability

Vulnerable URL: http://www.ticoexpress.com.ar/cotillon/busqueda/%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 15.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

0854.1go.co.kr Open Redirect vulnerability

Vulnerable URL: http://0854.1go.co.kr/link.php?url=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 15.11.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

dabur.com.bd XSS vulnerability

Vulnerable URL: http://www.dabur.com.bd/search.aspx?q=%27%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 15.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

galileo.edu XSS vulnerability

Vulnerable URL: https://www.galileo.edu/wp-content/plugins/vipers-video-quicktags/resources/jw-flv-player/player.swf?tracecall=prompt%27openbugbounty%27 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 15.11.2017 Vulnerability type:| XSS Vulnerabilit...

groups.csail.mit.edu XSS vulnerability

Vulnerable URL: https://groups.csail.mit.edu/locomotion/shadowbox/libraries/mediaplayer/player.swf?tracecall=prompt%27openbugbounty%27 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 15.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicl...

itschool.gov.in XSS vulnerability

Vulnerable URL: https://www.itschool.gov.in/mediaplayer.swf?file=http://content.bitsontherun.com/videos/bkaovAYt-364766.flv=falseℑ=http://appsec.ws/ExploitDB/cMon.jpg=true=javascript:confirm/openbugbounty/;//=blank&.swf Details: Description| Value ---|--- Patched:| Verification in progress Latest...

metaprom.ru XSS vulnerability

Vulnerable URL: http://www.metaprom.ru/search/?searchid=2285500=pas%22%27--!%3E%3Cscript%3EalertOPENBUGBOUNTY%3C/script%3E=0= Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 11.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

infojobs.net XSS vulnerability

Vulnerable URL: http://www.infojobs.net/candidate/blocked-email/edit.xhtml?codeuser=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 13.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...