Sql injection

Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the singledetail.php sid parameter...

CVE-2017-17597: Improper Neutralization of Special Elements used in an SQL Command

Nearbuy Clone Script 3.2 has SQL Injection via the categorylist.php search parameter...

PT-2017-14872

Name of the Vulnerable Software and Affected Versions FS Trademe Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the search item.php search parameter or the general item details.php id parameter. Recommendations For FS Trademe Clone version 1.0, consider...

PT-2017-14892

Name of the Vulnerable Software and Affected Versions Nearbuy Clone Script version 3.2 Description The issue is related to SQL Injection, which occurs via the category list.php search parameter. This allows for potential exploitation. Recommendations For Nearbuy Clone Script version 3.2, update t...

safirperfum.ir XSS vulnerability

Open Bug Bounty ID: OBB-417450 Description| Value ---|--- Affected Website:| safirperfum.ir Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

disneyfoodblog.com XSS vulnerability

Open Bug Bounty ID: OBB-372642 Description| Value ---|--- Affected Website:| disneyfoodblog.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

escoladatecnologia.com.br XSS vulnerability

Vulnerable URL:...

CVE-2017-15373

E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php aka the search private area...

CVE-2017-15373

E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php aka the search private area...

tvstoreonline.com XSS vulnerability

Open Bug Bounty ID: OBB-322079 Description| Value ---|--- Affected Website:| tvstoreonline.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

fermax.com XSS vulnerability

Vulnerable URL: https://www.fermax.com/portugal/corporate/motor-de-busca.html?search=%27%22%3E%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

shop.bvb.de XSS vulnerability

Open Bug Bounty ID: OBB-311230 Description| Value ---|--- Affected Website:| shop.bvb.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

a8.fandal.cz XSS vulnerability

Vulnerable URL: http://a8.fandal.cz/search.php?search=stereo detailsx=x Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

CVE-2017-12777

Cross-Site Scripting XSS exists in NexusPHP version v1.5 via some parameter to usersearch.php...

pornkino.to XSS vulnerability

Vulnerable URL: http://pornkino.to/?s=" xany...

inmocrossfit.com XSS vulnerability

Vulnerable URL: http://inmocrossfit.com/?s=%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

Joomla JoomRecipe 1.0.4 Component - search_author Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla JoomRecipe 1.0.4 Component - Blind SQL Injection Vulnerability Date: 20.07.2017 Exploit Author: Teng Vendor Homepage: http://joomboost.com/ Software Link:...

CVE-2017-9252: Improper Neutralization of Input During Web Page Generation

andrzuk/FineCMS through 2017-05-28 is vulnerable to a reflected XSS in the search page via the text-search parameter to index.php in a route=search action...

PT-2017-18808 · Andrzuk · Finecms

Name of the Vulnerable Software and Affected Versions: andrzuk/FineCMS versions prior to 2017-05-28 Description: The issue is related to a reflected XSS in the search page. This occurs via the text-search parameter to "index.php" in a "route=search" action. Recommendations: For versions prior to...

punk.de XSS vulnerability

Open Bug Bounty ID: OBB-232679 Description| Value ---|--- Affected Website:| punk.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...