1559 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2016-9751
Cross-site scripting XSS vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2016-9751: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
experiencelife.com XSS vulnerability
Vulnerable URL: https://experiencelife.com/?s=%27%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 96373 VIP website...
CVE-2016-9282
SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database information via action=search&module=search with the searchstring parameter...
SQL Injection Vulnerability in Gobetter Video Conferencing System of Beijing Gobetter Technology Co.
Gobalt network video conferencing system supports a variety of application scenarios such as work meetings, remote training, product sales, online seminars, consulting services and so on. There is a SQL injection vulnerability in the searchparam parameter of Gobetter videoconferencing system of...
Dswjcms Loan.html search参数 SQL注入
No description provided by source...
fanevalley.co.uk XSS vulnerability
Vulnerable URL: https://www.fanevalley.co.uk/search.php?s=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7031651 Google...
UBUNTU-CVE-2016-2560
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.15, 4.4.x before 4.4.15.5, and 4.5.x before 4.5.5.1 allow remote attackers to inject arbitrary web script or HTML via 1 a crafted Host HTTP header, related to libraries/Config.class.php; 2 crafted JSON data, relat...
Cross-Site Scripting Vulnerability in DotCMS Blog Search Page
DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A cross-site scripting vulnerability exists in DotCMS version 3.3, which originates from the blogs/ page in the...
outfitter.de XSS vulnerability
Vulnerable URL: https://www.outfitter.de/index.php?lang=0=search=z.B.+Marke,+Produkt+oder+Artikelnummer= Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:58 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
PHPBack 1.1 Cross Site Scripting
Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/PHPBACK-XSS.txt Vendor: ==================== www.phpback.org Product: =============== phpback v1.1 The open source feedback system, PHPBack is feedback a web application that you can easily...
PHPBack 1.1 Cross Site Scripting Vulnerability
PHPBack version 1.1 suffers from a cross site scripting vulnerability. PHPBack 1.1 Cross Site Scripting Vulnerability Vendor: ==================== www.phpback.org Product: =============== phpback v1.1 The open source feedback system, PHPBack is feedback a web application that you can easily...
WordPress Email Newsletter Plugin <= 20.13.6 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Vulnerable parameter is "search". Solution Update the plugin...
LiteCart 1.3.2 Cross Site Scripting Vulnerability
LiteCart version 1.3.2 suffers from a cross site scripting vulnerability. 1. Introduction Affected Product: LiteCart 1.3.2 Fixed in: 1.3.3 Fixed Version Link: https://www.litecart.net/downloading?version=1.3.3.1 Vendor Contact: email protected Vulnerability Type: XSS Remote Exploitable: Yes...
lagulu.com XSS vulnerability
Vulnerable URL: http://lagulu.com/?s=alert'XSSPOSED'...
lifeproof.com XSS vulnerability
Vulnerable URL: https://www.lifeproof.com/en-us/search?q=--...
designlovefest.com XSS vulnerability
Open Bug Bounty ID: OBB-81031 Description| Value ---|--- Affected Website:| designlovefest.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
SEO Redirection < 2.9 - Authenticated Reflected Cross-Site Scripting (XSS)
The plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability in its settings page, via the search GET parameter PoC https://example.com/wp-admin/options-general.php?page=seo-redirection.php=posts=%22+onmouseover%3Dalert%281%29+%3E...