movie4me.in XSS vulnerability

Open Bug Bounty ID: OBB-577459 Description| Value ---|--- Affected Website:| movie4me.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2017-17436

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.3.8 MantisBT versions prior to 2.1.2 MantisBT versions prior to 2.2.2 Description A cross-site scripting XSS issue exists in the MantisBT Configuration Report page, allowing remote attackers to inject arbitrary cod...

PT-2015-4132

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.2.13 through 1.2.17 Description A cross-site scripting XSS issue exists in the Configuration Report page, specifically in the "set configuration" box, allowing remote administrators to inject arbitrary web script or HTML...

MyBB 1.8.1 /report.php 跨站脚本漏洞

No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register This poc requires a valid username and it's password to work Users can register one manually. class...

PT-2019-6864

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.2.0rc1 through 1.2.14 Description A cross-site scripting issue exists in the configuration report page, allowing remote authenticated users to inject arbitrary web script or HTML via a complex value in the adm config...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in BugFree 2.1.3 allow remote attackers to inject arbitrary web script or HTML via 1 the ActionType parameter to Bug.php, the ReportMode parameter to 2 Report.php or 3 ReportLeft.php, or the PATHINFO to 4 AdminProjectList.php, 5 AdminGroupList.php...

CVE-2011-5285: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in BugFree 2.1.3 allow remote attackers to inject arbitrary web script or HTML via 1 the ActionType parameter to Bug.php, the ReportMode parameter to 2 Report.php or 3 ReportLeft.php, or the PATHINFO to 4 AdminProjectList.php, 5 AdminGroupList.php...

PT-2014-8980

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.18 Description The issue allows remote attackers to assign arbitrary issues. This is achieved via the handler id parameter in the "bug report.php" file. Recommendations For versions prior to 1.2.18, update to...

CVE-2014-9241

Multiple cross-site scripting XSS vulnerabilities in MyBB aka MyBulletinBoard 1.8.x before 1.8.2 allow remote attackers to inject arbitrary web script or HTML via the 1 type parameter to report.php, 2 signature parameter in a doeditsig action to usercp.php, or 3 title parameter in the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in MyBB aka MyBulletinBoard 1.8.x before 1.8.2 allow remote attackers to inject arbitrary web script or HTML via the 1 type parameter to report.php, 2 signature parameter in a doeditsig action to usercp.php, or 3 title parameter in the...

CVE-2014-9241

Multiple cross-site scripting XSS vulnerabilities in MyBB aka MyBulletinBoard 1.8.x before 1.8.2 allow remote attackers to inject arbitrary web script or HTML via the 1 type parameter to report.php, 2 signature parameter in a doeditsig action to usercp.php, or 3 title parameter in the...

CVE-2014-9241: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in MyBB aka MyBulletinBoard 1.8.x before 1.8.2 allow remote attackers to inject arbitrary web script or HTML via the 1 type parameter to report.php, 2 signature parameter in a doeditsig action to usercp.php, or 3 title parameter in the...

PT-2014-8896

Name of the Vulnerable Software and Affected Versions MyBB versions 1.8.x before 1.8.2 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via several parameters, including the type parameter to "report.php", the signature parameter in a "do...

Mybb 1.8.1 /report.php 跨站脚本漏洞

No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register from termcolor import cprint class TestPOCPOCBase: vulID = '1629' version = '1' author = 'chensy @ Knownsec'...

PT-2014-8767

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.2.13 through 1.2.17 Description A cross-site scripting XSS issue exists in the selection list in the filters on the Configuration Report page, specifically in the adm config report.php file. This allows remote administrator...

nuBuilder Remote File inclusion Vulnerability

No description provided by source. Software: nuBuilder 10.04.x and lowermaybe? Type: Remote File Inclusion Download: http://sourceforge.net/projects/nubuilder/files/ Author: Ahlspiess Email: [email protected] Vulnerable file: report.php report.php file content 1 ?php 2 / 3 File: report.ph...

PT-2014-4576

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.2.13 through 1.2.16 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This is achieved via the filter config id parameter in the manage configuration page, specifically in t...

Traidnt up 2.0 (report.php trtext) Blind SQL Injection Vulnerability

Traidnt up is a php online upload script assignmessage,charset$errors."انتظر سوف يتم تحويلك للملف مرة أخري".""; $traidnt-display"message.tpl"; else $ip = getenv'REMOTEADDR'; $reportquery = $db-query" INSERT INTO report reportkey ,reportwhy ,reportip VALUES '$fileid', '$trtext', '$ip';";...

House Style 0.1.2 - 'readfile()' Local File Disclosure

Exploit Title: House Style 0.1.2 = readfile Local File Disclosure Vulnerability Date: 11/07/2012 Author: GoLdM Vendor or Software Link: http://sourceforge.net/projects/housestyle/ Version: 1.03 Category:: readfile Local File Disclosure Vulnerability2 Tested on: Xp SP 2 Ex : House Style...

PT-2011-1942

Name of the Vulnerable Software and Affected Versions UTStats versions Beta 4 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the mid parameter in the "pages/match...