432 matches found
customer-registration-form.com Cross Site Scripting vulnerability OBB-1274643
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Car Rental System 2.6 Cross Site Scripting
Exploit Title: Car Rental System 2.6 XSS Vunlerability Google Dork:N/A Date: 2020-04-04 Exploit Author: @ThelastVvV Vendor Homepage: https://codecanyon.net/item/car-rental-system/2734072?srank=5 Version: 2.6 Tested on: 5.4.0-kali4-amd64 ---------------------------------------------------------...
WordPress Car Rental System 1.3 Cross Site Scripting
Exploit Title: WordPress Car Rental System 1.3 XSS Vunlerability Google Dork:N/A Date: 2020-04-04 Exploit Author: @ThelastVvV Vendor Homepage: https://codecanyon.net/item/car-rental-system-wordpress-plugin/4239755?srank=3 Version: 1.3 Tested on: 5.4.0-kali4-amd64...
Profile Builder and Profile Builder Pro < 3.1.1 - User Registration With Administrator Role
The plugin is affected by a broken authentication vulnerability, allowing unauthenticated users to register or edit their account and gain the Administrator role using the plugin's forms. The vulnerability only exists in the Plugin's own generated Registration Form or Profile Edit Form. This mean...
WordPress CarSpot premium theme <= 2.2.2 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability (registration form & user profile)
Authenticated Persistent Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress CarSpot premium theme versions = 2.2.2. Solution Update the WordPress CarSpot premium theme to the latest available version at least 2.2.3...
CarSpot < 2.2.3 - Multiple Vulnerabilities
Multiple vulnerabilities was discovered in the 'CarSpot – Dealership Wordpress Classified Theme', tested version — v2.2.0: - Authenticated Persistent XSS - Registration Form/User Profile - Authenticated Persistent XSS - Ad Post - IDOR leading to arbitrary deletion of ads Edit WPScanTeam: January...
Format string
Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypassed by posting directly to sentregister.php allowing special characters to be included and an XSS payload to be injected...
CVE-2019-8290
Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypassed by posting directly to sentregister.php allowing special characters to be included and an XSS payload to be injected...
CVE-2019-8290
CVE-2019-8290 affects Online Store v1.0. The vulnerability arises from the registration flow: posting to sent_register.php allows special characters to bypass the member email format validation and enables an XSS payload to be injected. The connected materials confirm an XSS issue stemming from i...
PT-2019-18967
Name of the Vulnerable Software and Affected Versions Online Store version 1.0 Description The issue allows the registration form requirements for the member email format to be bypassed by posting directly to the "sent register.php" endpoint, enabling special characters to be included and an XSS...
CVE-2019-8290: Improper Neutralization of Input During Web Page Generation
Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypassed by posting directly to sentregister.php allowing special characters to be included and an XSS payload to be injected...
CVE-2019-15556
Pvanloon1983 socialnetwork before 2019-07-03 allows SQL injection in includes/formhandlers/registerhandler.php...
Sql injection
Pvanloon1983 socialnetwork before 2019-07-03 allows SQL injection in includes/formhandlers/registerhandler.php...
User Registration <= 1.5.5 - Authenticated Cross-Site Scripting (XSS)
The User Registration – Custom Registration Form, Login And User Profile For WordPress WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability. PoC...
Wordpress UserPro < 4.9.21 Plugin - User Registration Privilege Escalation Vulnerability
Exploit for php platform in category web applications Exploit Title: Wordpress Plugin UserPro 4.9.21 User Registration With Administrator Role Google Dork: inurl:/wp-content/plugins/userpro/ Exploit Author: Noman Riffat Vendor Homepage: https://userproplugin.com/ Software Link:...
WordPress Custom Frontend Login Registration Form 1.01 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications ======================================================================================== Custom Frontend Login Registration Form v1.01 WP Plugin - Multiple XSS Vulnerabilities...
WordPress Arigato Autoresponder And Newsletter 2.5 SQL Injection / XSS Vulnerabilities
Exploit for php platform in category web applications Title: Blind SQL injection and multiple reflected XSS vulnerabilities in Wordpress Plugin Arigato Autoresponder and Newsletter v2.5 Author: Larry W. Cashdollar, @larry0 Date: 2018-08-22...
Rocket.Chat Cross-Site Scripting Vulnerability
Rocket.Chat is an open source built in JavaScript using the Meteor fullstack framework developed by the Web chat server . A cross-site scripting vulnerability exists in the registration form of Rocket.Chat versions prior to 0.66. A remote attacker can exploit this vulnerability to inject arbitrar...
CVE-2018-13879
A reflected XSS issue was discovered in the registration form in Rocket.Chat before 0.66. When one creates an account, the next step will ask for a username. This field will not save HTML control characters but an error will be displayed that shows the attempted username unescaped via...
Cross site scripting
A reflected XSS issue was discovered in the registration form in Rocket.Chat before 0.66. When one creates an account, the next step will ask for a username. This field will not save HTML control characters but an error will be displayed that shows the attempted username unescaped via...