PT-2021-23562 · Unknown · Ifsc Code Finder Project

Name of the Vulnerable Software and Affected Versions: IFSC Code Finder Project version 1.0 Description: A SQL Injection issue exists via the searchifsccode POST parameter in the "/search.php" API endpoint. This allows for potential exploitation. No information is provided about the estimated...

PT-2020-13680 · Vmware · Harbor

Name of the Vulnerable Software and Affected Versions: Harbor versions 1.9. through 2.0. Description: The issue allows exposure of sensitive information to an unauthorized actor. Authenticated users can exploit an enumeration vulnerability in Harbor. The vulnerability is present in the "/users" A...

CVE-2020-25120

The Admin CP in vBulletin 5.6.3 allows XSS via the admincp/search.php?do=dosearch URI...

newcastle.nsw.lions.org.au XSS vulnerability

Open Bug Bounty ID: OBB-678673 Description| Value ---|--- Affected Website:| newcastle.nsw.lions.org.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tuugo.com.ve XSS vulnerability

Open Bug Bounty ID: OBB-662748 Description| Value ---|--- Affected Website:| tuugo.com.ve Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Disclosure of user names and node names to unauthorized users through post-commit hook URL in Git Plugin

The class handling unauthenticated Git post-commit hook notification requests at the /git/ path unnecessarily extended another type that handled requests to the …/search/ sub-path. This allowed submission of search queries to Jenkins, and getting a list of search results usually available to anyo...

weka.fr XSS vulnerability

Open Bug Bounty ID: OBB-512247 Description| Value ---|--- Affected Website:| weka.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Vanguard Marketplace Digital Products PHP Cross Site Scripting Vulnerability

Vanguard Marketplace Digital Products PHP is a set of PHP-based scripts for online trading sites for MP3 and other digital files. A cross-site scripting vulnerability exists in Vanguard Marketplace Digital Products PHP. A remote attacker can exploit this vulnerability by sending the 'phpsquery'...

quintpub.com XSS vulnerability

Open Bug Bounty ID: OBB-443583 Description| Value ---|--- Affected Website:| quintpub.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

XSS Vulnerability in JIRA Issue Export

A search endpoint is vulnerable to an XSS injection in certain cases. Normally, the browser will urlencode its requests, but some proxy servers and load balancers will decode URL data by default. see http://stackoverflow.com/questions/31266629/nginx-encoding-normalizing-part-of-uri...

CVE-2017-14703

SQL injection vulnerability in Cash Back Comparison Script 1.0 allows remote attackers to execute arbitrary SQL commands via the PATHINFO to search/...

PT-2017-13636

Name of the Vulnerable Software and Affected Versions Cash Back Comparison Script version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the PATH INFO to the "search/" endpoint. Recommendations For version 1.0, consider restricting access...

webshopy.com XSS vulnerability

Vulnerable URL: http://www.webshopy.com/search.php?q= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check webshopy.com SSL...

apotikcentury.id XSS vulnerability

Open Bug Bounty ID: OBB-215572 Description| Value ---|--- Affected Website:| apotikcentury.id Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

fr.msi.com XSS vulnerability

Vulnerable URL: https://fr.msi.com/search/...

investorjunkie.com XSS vulnerability

Vulnerable URL: http://investorjunkie.com/search-results/?cof=FORID:11=002443039366691869659:nluh83gb4mo=UTF-8=1'%22alert/OPENBUGBOUNTY/...

pydoc.net XSS vulnerability

Vulnerable URL: http://pydoc.net/search?q=...

netdoktor.de XSS vulnerability

Vulnerable URL: http://www.netdoktor.de/search/es-ajax/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:58 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12410 Google Pagerank| 6 VIP website status:| Yes...

hgtv.ca XSS vulnerability

Vulnerable URL: http://www.hgtv.ca/search/default.aspx?x"prompt/XSSPOSED/...

tehnosat.com XSS vulnerability

Open Bug Bounty ID: OBB-72039 Description| Value ---|--- Affected Website:| tehnosat.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...