493 matches found
pizzashack.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-565648 Description| Value ---|--- Affected Website:| pizzashack.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
vinge.de XSS vulnerability
Open Bug Bounty ID: OBB-555140 Description| Value ---|--- Affected Website:| vinge.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
p4pconsulting.com XSS vulnerability
Open Bug Bounty ID: OBB-552969 Description| Value ---|--- Affected Website:| p4pconsulting.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
nextpart.ro XSS vulnerability
Open Bug Bounty ID: OBB-552966 Description| Value ---|--- Affected Website:| nextpart.ro Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
v.ht XSS vulnerability
Open Bug Bounty ID: OBB-551169 Description| Value ---|--- Affected Website:| v.ht Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
thestudentroom.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-449694 Description| Value ---|--- Affected Website:| thestudentroom.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...
Sql injection
Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the 1 email parameter or 2 userid parameter to register.php...
stiell.be XSS vulnerability
Vulnerable URL: http://stiell.be/register.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline:...
krommetje.nl XSS vulnerability
Vulnerable URL: https://www.krommetje.nl/humo-gen/register.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosur...
stylees.de XSS vulnerability
Open Bug Bounty ID: OBB-307503 Description| Value ---|--- Affected Website:| stylees.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2017-14231
GeniXCMS before 1.1.0 allows remote attackers to cause a denial of service account blockage by leveraging the mishandling of certain username substring relationships, such as the admin username versus the admin username, related to register.php, User.class.php, and Type.class.php...
bpna.org.uk XSS vulnerability
Vulnerable URL: https://www.bpna.org.uk/register.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3828708 VIP website status:| No Check bpna.org.uk SSL connection:| Grade: B...
columbia-language.scheduling.online XSS vulnerability
Vulnerable URL: https://columbia-language.scheduling.online/iappi/register/register.php?role=1"...
AlertDanger Protection Bypass
genix/cms is vulnerable to alertDanger protection bypass. It is possible to bypass the alertDanger MSGUSEREMAILEXIST protection mechanism via a register.php?act=edit=1 request...
Cross site request forgery (csrf)
GeniXCMS 1.0.2 allows remote attackers to bypass the alertDanger MSGUSEREMAILEXIST protection mechanism via a register.php?act=edit&id=1 request...
CVE-2017-8388
GeniXCMS 1.0.2 is affected by a protection bypass vulnerability that allows remote attackers to bypass the alertDanger MSG_USER_EMAIL_EXIST protection via a register.php?act=edit&id=1 request. The issue is consistently described across multiple sources (NVD entry, GHSA/OSV entries, and related ad...
hamburg-adressbuch.de XSS vulnerability
Vulnerable URL: http://www.hamburg-adressbuch.de/register.php?stichwort=%22+onmouseover%3Dalert%28%2FOPENBUGBOUNTY%2F%29+lol====alle=suchen=search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...
Sql injection
SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows unauthenticated users to execute arbitrary SQL commands via the activation parameter...
