2321 matches found
hsmithandsons.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-64001 Description| Value ---|--- Affected Website:| hsmithandsons.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
my-meego.com XSS vulnerability
Open Bug Bounty ID: OBB-63979 Description| Value ---|--- Affected Website:| my-meego.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
swindaleparks.co.uk XSS vulnerability
Vulnerable URL: http://www.swindaleparks.co.uk/search.php?jobtype=1location=Midlandskeys=derp " salarymin=search.x=0search.y=0 Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 22:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
freewebarcade.com XSS vulnerability
Open Bug Bounty ID: OBB-61953 Description| Value ---|--- Affected Website:| freewebarcade.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
kolhapuridjs.com XSS vulnerability
Open Bug Bounty ID: OBB-60035 Description| Value ---|--- Affected Website:| kolhapuridjs.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
CVE-2015-0937: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-0938: Exposure of Sensitive Information to an Unauthorized Actor
search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remote attackers to bypass intended access restrictions, and list or read arbitrary documents, by providing matching keywords in conjunction with a crafted parameter...
PT-2015-4985
Name of the Vulnerable Software and Affected Versions Blue Coat Malware Analysis appliance versions prior to 4.2.4.20150312-RELEASE Description The issue allows remote attackers to bypass intended access restrictions and list or read arbitrary documents by providing matching keywords in conjuncti...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Ultimate PHP Board aka myUPB before 2.2.8 allow remote attackers to inject arbitrary web script or HTML via the 1 q parameter to search.php or 2 avatar parameter to profile.php...
CVE-2015-2217
Ultimate PHP Board (UPB, also known as myUPB) is affected by multiple XSS vulnerabilities. The CVE-2015-2217 entry describes remote XSS via the q parameter in search.php or the avatar parameter in profile.php, with impact described as injection of arbitrary web script/HTML. Public sources within ...
CVE-2015-2217
Multiple cross-site scripting XSS vulnerabilities in Ultimate PHP Board aka myUPB before 2.2.8 allow remote attackers to inject arbitrary web script or HTML via the 1 q parameter to search.php or 2 avatar parameter to profile.php...
PT-2015-5669
Name of the Vulnerable Software and Affected Versions Ultimate PHP Board versions prior to 2.2.8 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the q parameter to...
CVE-2015-2217: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Ultimate PHP Board aka myUPB before 2.2.8 allow remote attackers to inject arbitrary web script or HTML via the 1 q parameter to search.php or 2 avatar parameter to profile.php...
CVE-2015-1518
SQL injection vulnerability in the searchpost function in includes/search.php in Redaxscript before 2.3.0 allows remote attackers to execute arbitrary SQL commands via the searchterms parameter...
Sql injection
SQL injection vulnerability in the searchpost function in includes/search.php in Redaxscript before 2.3.0 allows remote attackers to execute arbitrary SQL commands via the searchterms parameter...
CVE-2015-1518
SQL injection vulnerability in the searchpost function in includes/search.php in Redaxscript before 2.3.0 allows remote attackers to execute arbitrary SQL commands via the searchterms parameter...
CVE-2015-1518
SQL injection vulnerability in the searchpost function in includes/search.php in Redaxscript before 2.3.0 allows remote attackers to execute arbitrary SQL commands via the searchterms parameter...
PT-2015-5341
Name of the Vulnerable Software and Affected Versions Redaxscript versions prior to 2.3.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the search terms parameter in the search post function, located in includes/search.php. Recommendations F...