LiteCart 1.3.2 Cross Site Scripting Vulnerability

LiteCart version 1.3.2 suffers from a cross site scripting vulnerability. 1. Introduction Affected Product: LiteCart 1.3.2 Fixed in: 1.3.3 Fixed Version Link: https://www.litecart.net/downloading?version=1.3.3.1 Vendor Contact: email protected Vulnerability Type: XSS Remote Exploitable: Yes...

lagulu.com XSS vulnerability

Vulnerable URL: http://lagulu.com/?s=alert'XSSPOSED'...

lifeproof.com XSS vulnerability

Vulnerable URL: https://www.lifeproof.com/en-us/search?q=--...

designlovefest.com XSS vulnerability

Open Bug Bounty ID: OBB-81031 Description| Value ---|--- Affected Website:| designlovefest.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

SEO Redirection < 2.9 - Authenticated Reflected Cross-Site Scripting (XSS)

The plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability in its settings page, via the search GET parameter PoC https://example.com/wp-admin/options-general.php?page=seo-redirection.php=posts=%22+onmouseover%3Dalert%281%29+%3E...

store.acousticsounds.com XSS vulnerability

Vulnerable URL: http://store.acousticsounds.com/index.cfm?get=results='"...

Sql injection

SQL injection vulnerability in LivelyCart 1.2.0 allows remote attackers to execute arbitrary SQL commands via the searchquery parameter to product/search...

Lively cart SQL Injection Vulnerability

Exploit for multiple platform in category web applications Exploit Title : Lively cart SQL Injection vulnerability Author : Manish Kishan Tanwar AKA error1046 Vendor Link : http://codecanyon.net/item/livelycart-a-jquery-php-store-shop/5531393 Date : 18/06/2015 Love to : zero cool,Team...

Lively Cart - SQL Injection

Lively Cart - SQL Injection Exploit Title : Lively cart SQL Injection vulnerability Author : Manish Kishan Tanwar AKA error1046 Vendor Link : http://codecanyon.net/item/livelycart-a-jquery-php-store-shop/5531393 Date : 18/06/2015 Love to : zero cool,Team indishell,Mannu,Viki,Hardeep...

australia-businessdirectory.com XSS vulnerability

Open Bug Bounty ID: OBB-62219 Description| Value ---|--- Affected Website:| australia-businessdirectory.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

michaels.com XSS vulnerability

Vulnerable URL: http://www.michaels.com/search?q=javascript:alert/XSSPOSED/...

CVE-2010-5322

Cross-site scripting XSS vulnerability in ZeusCart 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action to index.php...

CVE-2010-5322

Cross-site scripting XSS vulnerability in ZeusCart 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action to index.php...

NPDS Revolution SQL Injection Vulnerability

NPDS Revolution is a content and community management system CMS. The system supports search engine optimization, group and workspace management, multiple themes, and more. A SQL injection vulnerability exists in the search.php script in NPDS Revolution version 13. A remote attacker can exploit...

ManageEngine ServiceDesk Plus 'search' Parameter User Enumeration Vulnerability

ServiceDesk Plus is web-based helpdesk software that helps users manage all their communications from a single point. A user enumeration vulnerability exists in the ManageEngine ServiceDesk Plus 'search' parameter, which can be exploited by an attacker to obtain a valid user account via a brute...

DEBIAN-CVE-2015-1032

Cross-site scripting XSS vulnerability in Kiwix before 0.9.1, when using kiwix-serve, allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to /search...

Cross site scripting

Cross-site scripting XSS vulnerability in Kiwix before 0.9.1, when using kiwix-serve, allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to /search...

CVE-2014-100038

Cross-site scripting XSS vulnerability in Storytlr 1.3.dev and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter to search/...

CVE-2014-8751

Multiple cross-site scripting XSS vulnerabilities in goYWP WebPress 13.00.06 allow remote attackers to inject arbitrary web script or HTML via the 1 searchparam parameter to search.php or 2 name, 3 address, or 4 comment parameter to forms.php...

CVE-2014-8751

Multiple cross-site scripting XSS vulnerabilities in goYWP WebPress 13.00.06 allow remote attackers to inject arbitrary web script or HTML via the 1 searchparam parameter to search.php or 2 name, 3 address, or 4 comment parameter to forms.php...