CVE-2017-5882

Cross-site scripting XSS vulnerability in index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2017-5882

Cross-site scripting XSS vulnerability in index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

Joomla JTAG Calendar 6.2.4 SQL Injection

Exploit Title: Joomla Component JTAG Calendar 6.2.4 - SQL Injection Date: 2017-1-28 Vender Home : https://extensions.joomla.org/extension/jtag-calendar/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home : http://persian-team.ir/ Tested on: Windows AND Linux Telegram Channel :...

Olive Blog vulnerable to cross-site scripting

Overview Olive Blog provided by Olive Design contains a cross-site scripting vulnerability CWE-79 due to a flaw in processing the search parameter. Ueki Shuya reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact ...

JVN#60879379: Olive Blog vulnerable to cross-site scripting

Olive Blog provided by Olive Design contains a cross-site scripting vulnerability CWE-79 due to a flaw in processing the search parameter. Impact An arbitrary script may be executed on the user's web browser. Solution Do not use Olive Blog Olive Blog is no longer being developed or maintained. It...

kmle.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-199342 Description| Value ---|--- Affected Website:| kmle.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2016-9751

Cross-site scripting XSS vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2016-9751

Cross-site scripting XSS vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

experiencelife.com XSS vulnerability

Vulnerable URL: https://experiencelife.com/?s=%27%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 96373 VIP website...

CVE-2016-9282

SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database information via action=search&module=search with the searchstring parameter...

SQL Injection Vulnerability in Gobetter Video Conferencing System of Beijing Gobetter Technology Co.

Gobalt network video conferencing system supports a variety of application scenarios such as work meetings, remote training, product sales, online seminars, consulting services and so on. There is a SQL injection vulnerability in the searchparam parameter of Gobetter videoconferencing system of...

Dswjcms Loan.html search参数 SQL注入

No description provided by source...

fanevalley.co.uk XSS vulnerability

Vulnerable URL: https://www.fanevalley.co.uk/search.php?s=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7031651 Google...

UBUNTU-CVE-2016-2560

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.15, 4.4.x before 4.4.15.5, and 4.5.x before 4.5.5.1 allow remote attackers to inject arbitrary web script or HTML via 1 a crafted Host HTTP header, related to libraries/Config.class.php; 2 crafted JSON data, relat...

Cross-Site Scripting Vulnerability in DotCMS Blog Search Page

DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A cross-site scripting vulnerability exists in DotCMS version 3.3, which originates from the blogs/ page in the...

outfitter.de XSS vulnerability

Vulnerable URL: https://www.outfitter.de/index.php?lang=0=search=z.B.+Marke,+Produkt+oder+Artikelnummer= Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:58 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

PHPBack 1.1 Cross Site Scripting

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/PHPBACK-XSS.txt Vendor: ==================== www.phpback.org Product: =============== phpback v1.1 The open source feedback system, PHPBack is feedback a web application that you can easily...

PHPBack 1.1 Cross Site Scripting Vulnerability

PHPBack version 1.1 suffers from a cross site scripting vulnerability. PHPBack 1.1 Cross Site Scripting Vulnerability Vendor: ==================== www.phpback.org Product: =============== phpback v1.1 The open source feedback system, PHPBack is feedback a web application that you can easily...

WordPress Email Newsletter Plugin <= 20.13.6 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Vulnerable parameter is "search". Solution Update the plugin...