1216 matches found
CVE-2017-15373
E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php aka the search private area...
tvstoreonline.com XSS vulnerability
Open Bug Bounty ID: OBB-322079 Description| Value ---|--- Affected Website:| tvstoreonline.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
fermax.com XSS vulnerability
Vulnerable URL: https://www.fermax.com/portugal/corporate/motor-de-busca.html?search=%27%22%3E%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...
shop.bvb.de XSS vulnerability
Open Bug Bounty ID: OBB-311230 Description| Value ---|--- Affected Website:| shop.bvb.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
a8.fandal.cz XSS vulnerability
Vulnerable URL: http://a8.fandal.cz/search.php?search=stereo detailsx=x Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...
CVE-2017-12777
Cross-Site Scripting XSS exists in NexusPHP version v1.5 via some parameter to usersearch.php...
pornkino.to XSS vulnerability
Vulnerable URL: http://pornkino.to/?s=" xany...
inmocrossfit.com XSS vulnerability
Vulnerable URL: http://inmocrossfit.com/?s=%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...
Joomla JoomRecipe 1.0.4 Component - search_author Parameter SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla JoomRecipe 1.0.4 Component - Blind SQL Injection Vulnerability Date: 20.07.2017 Exploit Author: Teng Vendor Homepage: http://joomboost.com/ Software Link:...
PT-2017-18808 · Andrzuk · Finecms
Name of the Vulnerable Software and Affected Versions: andrzuk/FineCMS versions prior to 2017-05-28 Description: The issue is related to a reflected XSS in the search page. This occurs via the text-search parameter to "index.php" in a "route=search" action. Recommendations: For versions prior to...
punk.de XSS vulnerability
Open Bug Bounty ID: OBB-232679 Description| Value ---|--- Affected Website:| punk.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Cross site scripting
Cross-site scripting vulnerability in Olive Blog allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2016-7839
Cross-site scripting vulnerability in Olive Blog allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2016-7839
Cross-site scripting vulnerability in Olive Blog allows remote attackers to inject arbitrary web script or HTML via the search parameter...
Social Directory Script SQL Injection Vulnerability
Social Directory Script is a website that helps users to quickly build a social directory, where they can create a list of their favorite websites and add their favorite websites to the list. Social Directory Script 2.0 suffers from SQL injection in several parameters such as search and category...
samsunbeyi.com XSS vulnerability
Vulnerable URL: http://samsunbeyi.com/?s="/alert/openbugbounty/...
SANADATA SanaCMS Cross-Site Scripting Vulnerability
SANADATA SanaCMS is a content management system CMS of SANADATA Company in Iran. A cross-site scripting vulnerability exists in the index.asp file in SANADATA SanaCMS version 7.3. The vulnerability can be exploited by a remote attacker to inject arbitrary web script or HTML using the 'search'...
Cross site scripting
Cross-site scripting XSS vulnerability in index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...