ProvidenceCasinoToken Integer Overflow Vulnerability

ProvidenceCasinoToken is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the sell function of ProvidenceCasinoToken's smart contract implementation where "amount sellPrice" can be zero. An attacker could exploit this vulnerability to reduce the seller's assets...

catalog.newprovidencelibrary.org XSS vulnerability

Vulnerable URL: http://catalog.newprovidencelibrary.org:8080/TLCScripts/interpac.dll?SearchForm=1=pac=,0,%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Autofocus%20/;%20Onfocus=alert'OPENBUGBOUNTY'//%3E%3CSvg%3E=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017...

healthplans.providence.org XSS vulnerability

Vulnerable URL: https://healthplans.providence.org/search-results/?keyword=%22%3e%3c%2ftitle%3e%27%3e%3b%3c%2fscript%3e%3csvg%2fonload%3dalert%2fOPENBUGBOUNTY%2f%3e Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:|...

CVE-2013-4507

Cross-site scripting XSS vulnerability in CollectiveAccess Providence and Pawtucket before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in CollectiveAccess Providence and Pawtucket before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4507

CVE-2013-4507 affects CollectiveAccess Providence and Pawtucket up to version 1.3.0. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The root cause is a reflected/stored XSS issue in the web interf...

CVE-2013-4507

Cross-site scripting XSS vulnerability in CollectiveAccess Providence and Pawtucket before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-5047

Name of the Vulnerable Software and Affected Versions CollectiveAccess Providence and Pawtucket versions prior to 1.3.1 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieved via...

CVE-2013-4507: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in CollectiveAccess Providence and Pawtucket before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...