PT-2021-23163 · Bookstack · Bookstack

Name of the Vulnerable Software and Affected Versions: BookStack versions prior to 21.11.3 Description: The issue allows a logged-in user with no privileges or a guest user if public access is enabled to access the "/search/users/select" AJAX endpoint, which is meant for admins to manage audit...

PT-2021-23562 · Unknown · Ifsc Code Finder Project

Name of the Vulnerable Software and Affected Versions: IFSC Code Finder Project version 1.0 Description: A SQL Injection issue exists via the searchifsccode POST parameter in the "/search.php" API endpoint. This allows for potential exploitation. No information is provided about the estimated...

PT-2020-13680 · Vmware · Harbor

Name of the Vulnerable Software and Affected Versions: Harbor versions 1.9. through 2.0. Description: The issue allows exposure of sensitive information to an unauthorized actor. Authenticated users can exploit an enumeration vulnerability in Harbor. The vulnerability is present in the "/users" A...

CVE-2020-25120

The Admin CP in vBulletin 5.6.3 allows XSS via the admincp/search.php?do=dosearch URI...

newcastle.nsw.lions.org.au XSS vulnerability

Open Bug Bounty ID: OBB-678673 Description| Value ---|--- Affected Website:| newcastle.nsw.lions.org.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tuugo.com.ve XSS vulnerability

Open Bug Bounty ID: OBB-662748 Description| Value ---|--- Affected Website:| tuugo.com.ve Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

weka.fr XSS vulnerability

Open Bug Bounty ID: OBB-512247 Description| Value ---|--- Affected Website:| weka.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Vanguard Marketplace Digital Products PHP Cross Site Scripting Vulnerability

Vanguard Marketplace Digital Products PHP is a set of PHP-based scripts for online trading sites for MP3 and other digital files. A cross-site scripting vulnerability exists in Vanguard Marketplace Digital Products PHP. A remote attacker can exploit this vulnerability by sending the 'phpsquery'...

quintpub.com XSS vulnerability

Open Bug Bounty ID: OBB-443583 Description| Value ---|--- Affected Website:| quintpub.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

XSS Vulnerability in JIRA Issue Export

A search endpoint is vulnerable to an XSS injection in certain cases. Normally, the browser will urlencode its requests, but some proxy servers and load balancers will decode URL data by default. see http://stackoverflow.com/questions/31266629/nginx-encoding-normalizing-part-of-uri...

CVE-2017-14703

SQL injection vulnerability in Cash Back Comparison Script 1.0 allows remote attackers to execute arbitrary SQL commands via the PATHINFO to search/...

webshopy.com XSS vulnerability

Vulnerable URL: http://www.webshopy.com/search.php?q= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check webshopy.com SSL...

apotikcentury.id XSS vulnerability

Open Bug Bounty ID: OBB-215572 Description| Value ---|--- Affected Website:| apotikcentury.id Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

fr.msi.com XSS vulnerability

Vulnerable URL: https://fr.msi.com/search/...

investorjunkie.com XSS vulnerability

Vulnerable URL: http://investorjunkie.com/search-results/?cof=FORID:11=002443039366691869659:nluh83gb4mo=UTF-8=1'%22alert/OPENBUGBOUNTY/...

pydoc.net XSS vulnerability

Vulnerable URL: http://pydoc.net/search?q=...

netdoktor.de XSS vulnerability

Vulnerable URL: http://www.netdoktor.de/search/es-ajax/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:58 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12410 Google Pagerank| 6 VIP website status:| Yes...

hgtv.ca XSS vulnerability

Vulnerable URL: http://www.hgtv.ca/search/default.aspx?x"prompt/XSSPOSED/...

tehnosat.com XSS vulnerability

Open Bug Bounty ID: OBB-72039 Description| Value ---|--- Affected Website:| tehnosat.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2014-5099

Name of the Vulnerable Software and Affected Versions Elasticsearch versions prior to 1.2 Description The default configuration in Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to the search...