CVE-2016-6320

Cross-site scripting XSS vulnerability in app/assets/javascripts/hosteditinterfaces.js in Foreman before 1.12.2 allows remote authenticated users to inject arbitrary web script or HTML via the network interface device identifier in the host interface form...

Open-Xchange: OX Guard: DOM Based Cross-Site Scripting

Summary OX Guard's "Guest Reader" is vulnerable to DOM Based XSS. The vulnerable parameter is "templid". The reader.js script see below takes the parameter's value and injects it into the page/DOM without encoding/sanitizing it first. PoC:...

Fotoware Fotoweb Cross-site Scripting Vulnerability

Fotoware Fotoweb is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

rsafrance.biz XSS vulnerability

Open Bug Bounty ID: OBB-171102 Description| Value ---|--- Affected Website:| rsafrance.biz Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

DLA-555-1 python-django - security update

Bulletin has no description...

erc.europa.eu XSS vulnerability

Vulnerable URL: https://erc.europa.eu/getvideo/15148?height=353=650" Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 10:40 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

CVE-2016-5704

Cross-site scripting XSS vulnerability in the table-structure page in phpMyAdmin 4.6.x before 4.6.3 allows remote attackers to inject arbitrary web script or HTML via vectors involving a comment...

Kagao 3.0 - Multiple Vulnerabilities

Kagao 3.0 - Multiple Vulnerabilities Application Name : Kagao v3.0 - Professional Classified Market Google Dork : inurl:/cat1.php?id2= Exploit Author : Cyber Warrior | Bug Researchers Group | N4TuraL Vendor Homepage : http://kogaoscript.com/ Vulnerable Type : SQL Injection & Cross Site Scripting...

Kagao 3.0 - Multiple Vulnerabilities

Application Name : Kagao v3.0 - Professional Classified Market Google Dork : inurl:/cat1.php?id2= Exploit Author : Cyber Warrior | Bug Researchers Group | N4TuraL Vendor Homepage : http://kogaoscript.com/ Vulnerable Type : SQL Injection & Cross Site Scripting Date : 2016-06-26 Tested on : Windows...

Real Estate Portal 4.1 - Multiple Vulnerabilities

Real Estate Portal 4.1 - Multiple Vulnerabilities Real Estate Portal v4.1 Remote Code Execution Vulnerability Vendor: NetArt Media Product web page: http://www.netartmedia.net Affected version: 4.1 Summary: Real Estate Portal is a software written in PHP, allowing you to launch powerful and...

Teampass v2.1.26 - Stored Cross Site Scripting Vulnerability

Document Title: =============== Teampass v2.1.26 - Stored Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1845 Release Date: ============= 2016-05-23 Vulnerability Laboratory ID VL-ID: ==================================...

wunderground.com XSS vulnerability

Vulnerable URL: https://www.wunderground.com/blog/nationalsummary/weather-underground-national-forecast-for-friday-april-29%27%22%3E%3CScRiPt%20%3Eprompt%28/OPENBUGBOUNTY/%29%3C/ScRiPt%3E-2016 Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:...

ncga.state.nc.us XSS vulnerability

Open Bug Bounty ID: OBB-148849 Description| Value ---|--- Affected Website:| ncga.state.nc.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

JVN#78482127: EC-CUBE plugin "Social-button Plugin Premium" and "Social-button Plugin" vulnerable to cross-site scripting

EC-CUBE plugin "Social-button Plugin Premium" and "Social-button Plugin" provided by Cyber-Will Inc. contain a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to th...

news.fool.co.uk XSS vulnerability

Vulnerable URL: http://news.fool.co.uk/tags/hub.aspx?tag=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

infomine.com XSS vulnerability

Open Bug Bounty ID: OBB-128106 Description| Value ---|--- Affected Website:| infomine.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cs.hattrick.org XSS vulnerability

Open Bug Bounty ID: OBB-126234 Description| Value ---|--- Affected Website:| cs.hattrick.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cis.edu.sg XSS vulnerability

Vulnerable URL: http://www.cis.edu.sg/cfnews/forward.cfm?dest=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| Yes, at 11.04.2016 Latest check for patch:| 11.04.2016 15:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1002696 Google...

duluthnewstribune.com XSS vulnerability

Vulnerable URL: http://www.duluthnewstribune.com/retrieve/Jesse Clark/11/ddd" Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 49314 Google Pagerank| 6 VIP...

Amazon Linux: Security Advisory (ALAS-2015-629)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...