42 matches found
Cross-site Scripting (XSS) - Reflected in collectiveaccess/providence
Description Reflected XSS in form Search Proof of Concept // PoC.js POST /find/QuickSearch/Index HTTP/1.1 Host: demo.collectiveaccess.org Cookie: cademo=5b9d06b7-3860-477d-9d53-85e6b2b1ae99; CAcademouilocale=enUS User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:93.0 Gecko/20100101...
Open Redirect in collectiveaccess/providence
Description Open Redirect on Login with parameter ?redirect= Proof of Concept // PoC.request POST /system/Auth/DoLogin HTTP/1.1 Host: demo.collectiveaccess.org Cookie: cademo=ea7632ab-0ad8-4b0f-939f-9e292f232ff6; CAcademouilocale=enUS User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:93...
providence-strasbourg.fr Cross Site Scripting vulnerability OBB-1484543
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
washington.providence.org Cross Site Scripting vulnerability OBB-1339635
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
providence-strasbourg.fr Cross Site Scripting vulnerability OBB-1276915
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
ProvidenceCasino Buffer Overflow Vulnerability
Providence Crypto Casino PVE ContractName:ProvidenceCasinoToken is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in PVE's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary...
Integer overflow
The mintToken function of a smart contract implementation for Providence Crypto Casino PVE Contract Name: ProvidenceCasinoToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...
CVE-2018-13547
The mintToken function of a smart contract implementation for Providence Crypto Casino PVE Contract Name: ProvidenceCasinoToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...
CVE-2018-13547
The CVE-2018-13547 entry concerns Providence Casino Token (ProvidenceCasinoToken) on Ethereum, where the mintToken function contains an integer overflow that allows the contract owner to set any user’s balance to an arbitrary value. Public sources in connected documents (CNVD/CNVD-2020-22842 and ...
CVE-2018-13210
The sell function of a smart contract implementation for Providence Crypto Casino PVE Contract Name: ProvidenceCasinoToken, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...
Integer overflow
The sell function of a smart contract implementation for Providence Crypto Casino PVE Contract Name: ProvidenceCasinoToken, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...
CVE-2018-13210
The sell function of a smart contract implementation for Providence Crypto Casino PVE Contract Name: ProvidenceCasinoToken, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...
CVE-2018-13210
The sell function of a smart contract implementation for Providence Crypto Casino PVE Contract Name: ProvidenceCasinoToken, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...
CVE-2018-13210
The vulnerability CVE-2018-13210 affects ProvidenceCasinoToken, an Ethereum ERC20 token. The sell function has an integer overflow where amount * sellPrice can become zero, reducing a seller’s assets. This is described in the NVD entry and corroborated by CNVD/PRION/CVELIST records; no public rem...
ProvidenceCasino Integer Overflow Vulnerability
ProvidenceCasino PVE is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the sell function of ProvidenceCasino PVE's smart contract implementation where "amount sellPrice" can be zero. An attacker could exploit the vulnerability to reduce the seller's assets...
ProvidenceCasinoToken Integer Overflow Vulnerability
ProvidenceCasinoToken is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the sell function of ProvidenceCasinoToken's smart contract implementation where "amount sellPrice" can be zero. An attacker could exploit this vulnerability to reduce the seller's assets...
catalog.newprovidencelibrary.org XSS vulnerability
Vulnerable URL: http://catalog.newprovidencelibrary.org:8080/TLCScripts/interpac.dll?SearchForm=1=pac=,0,%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Autofocus%20/;%20Onfocus=alert'OPENBUGBOUNTY'//%3E%3CSvg%3E=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017...
healthplans.providence.org XSS vulnerability
Vulnerable URL: https://healthplans.providence.org/search-results/?keyword=%22%3e%3c%2ftitle%3e%27%3e%3b%3c%2fscript%3e%3csvg%2fonload%3dalert%2fOPENBUGBOUNTY%2f%3e Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:|...
CVE-2013-4507
Cross-site scripting XSS vulnerability in CollectiveAccess Providence and Pawtucket before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in CollectiveAccess Providence and Pawtucket before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...