PT-2020-13680 · Vmware · Harbor

Name of the Vulnerable Software and Affected Versions: Harbor versions 1.9. through 2.0. Description: The issue allows exposure of sensitive information to an unauthorized actor. Authenticated users can exploit an enumeration vulnerability in Harbor. The vulnerability is present in the "/users" A...

CVE-2020-25120

The Admin CP in vBulletin 5.6.3 allows XSS via the admincp/search.php?do=dosearch URI...

newcastle.nsw.lions.org.au XSS vulnerability

Open Bug Bounty ID: OBB-678673 Description| Value ---|--- Affected Website:| newcastle.nsw.lions.org.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tuugo.com.ve XSS vulnerability

Open Bug Bounty ID: OBB-662748 Description| Value ---|--- Affected Website:| tuugo.com.ve Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

weka.fr XSS vulnerability

Open Bug Bounty ID: OBB-512247 Description| Value ---|--- Affected Website:| weka.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Vanguard Marketplace Digital Products PHP Cross Site Scripting Vulnerability

Vanguard Marketplace Digital Products PHP is a set of PHP-based scripts for online trading sites for MP3 and other digital files. A cross-site scripting vulnerability exists in Vanguard Marketplace Digital Products PHP. A remote attacker can exploit this vulnerability by sending the 'phpsquery'...

quintpub.com XSS vulnerability

Open Bug Bounty ID: OBB-443583 Description| Value ---|--- Affected Website:| quintpub.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

XSS Vulnerability in JIRA Issue Export

A search endpoint is vulnerable to an XSS injection in certain cases. Normally, the browser will urlencode its requests, but some proxy servers and load balancers will decode URL data by default. see http://stackoverflow.com/questions/31266629/nginx-encoding-normalizing-part-of-uri...

CVE-2017-14703

SQL injection vulnerability in Cash Back Comparison Script 1.0 allows remote attackers to execute arbitrary SQL commands via the PATHINFO to search/...

webshopy.com XSS vulnerability

Vulnerable URL: http://www.webshopy.com/search.php?q= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check webshopy.com SSL...

apotikcentury.id XSS vulnerability

Open Bug Bounty ID: OBB-215572 Description| Value ---|--- Affected Website:| apotikcentury.id Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

fr.msi.com XSS vulnerability

Vulnerable URL: https://fr.msi.com/search/...

investorjunkie.com XSS vulnerability

Vulnerable URL: http://investorjunkie.com/search-results/?cof=FORID:11=002443039366691869659:nluh83gb4mo=UTF-8=1'%22alert/OPENBUGBOUNTY/...

pydoc.net XSS vulnerability

Vulnerable URL: http://pydoc.net/search?q=...

netdoktor.de XSS vulnerability

Vulnerable URL: http://www.netdoktor.de/search/es-ajax/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:58 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12410 Google Pagerank| 6 VIP website status:| Yes...

hgtv.ca XSS vulnerability

Vulnerable URL: http://www.hgtv.ca/search/default.aspx?x"prompt/XSSPOSED/...

tehnosat.com XSS vulnerability

Open Bug Bounty ID: OBB-72039 Description| Value ---|--- Affected Website:| tehnosat.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2014-5099

Name of the Vulnerable Software and Affected Versions Elasticsearch versions prior to 1.2 Description The default configuration in Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to the search...

PT-2012-1339 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.6.1 Description: The issue allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a 1 do search action to "search.php" or 2 do stuff action to "private.php". The vendor disputes this...

PT-2008-2890 · Zoho · Manageengine Servicedesk Plus

Name of the Vulnerable Software and Affected Versions: ManageEngine ServiceDesk Plus version 7.0.0 Build 7011 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the searchText parameter in the...