avsforum.com XSS vulnerability

Vulnerable URL: http://www.avsforum.com/wordpress/newsletter/signup-error.php?error=Invalid%20email:%20%3Cscript%3Ealert%28%22xssposed%22%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:11 GMT Vulnerability type:| XSS...

New Relic: Password disclosure during signup process

New relic provides user's the option to register new accounts. It was observed that during creation of new account process, user's password is displayed in clear text in response. This leads to disclosure of passwords. There may be another issue here that user's passwords are not stored in hashed...

osmoseproductions.com XSS vulnerability

Vulnerable URL: http://www.osmoseproductions.com/signup/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 617588 Google Pagerank| 3 VIP website status:| No Check osmoseproductions.co...

New Relic: Reflected XSS on Signup Page

Hello Team, I have found a reflected XSS on Signup Page i.e. on https://newrelic.com/signup. Please find the below details. Vulnerable URL: https://newrelic.com/signup Vulnerable Field: Your Email Address Vulnerable Parameter: email Parameter Type: POST Payload used: Browser used: Mozilla Firefox...

New Relic: A Signup page does not properly validate the authenticity token at the server side.

Description: POST /signups HTTP/1.1 Host: newrelic.com User-Agent: Mozilla/5.0 Windows NT 6.2; rv:43.0 Gecko/20100101 Firefox/43.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate X-NewRelic-ID: VQQHU1RbARABVlNWAgAGUA== X-CSRF-Token: Content-Type:...

Updated ruby-mail packages fix security vulnerability

The Mail library does not impose a length limit on email addresses, so an attacker can send a long spam message via a recipient address unless there is a limit on the application's side. The attacker-injected message in the recipient address is processed by the server. This type of vulnerability...

patternmart.com XSS vulnerability

Vulnerable URL: http://www.patternmart.com/signupform.php?acode=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1015427 Google Pagerank...

imagefap.com XSS vulnerability

Vulnerable URL: http://www.imagefap.com/signup.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1697 Google Pagerank| 4 VIP website status:| Yes Check imagefap.com SSL connection...

epost.ca XSS vulnerability

Vulnerable URL: https://www.epost.ca/service/signup.a?providerID=...

epost.ca XSS vulnerability

Vulnerable URL: https://www.epost.ca/service/signup.a?'...

food.com XSS vulnerability

Vulnerable URL: http://www.food.com/signup?dest=alert'XSSPOSED'...

jpl.nasa.gov XSS vulnerability

Open Bug Bounty ID: OBB-88951 Description| Value ---|--- Affected Website:| jpl.nasa.gov Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediatio...

Protect Host Media Auto-Exchanger Cross-Site Request Forgery Vulnerability

Protect Host Media Auto-Exchanger is a set of tools for exchanging, buying and selling e-currency from Protect Host Media UK. A cross-site request forgery vulnerability exists in Protect Host Media Auto-Exchanger version 5.1.0, which can be exploited by a remote attacker to change a password by...

Drupal MailChimp module cross-site scripting vulnerability (CNVD-2015-05690)

Drupal is the Drupal community maintained by a set of free, open source content management system developed in PHP. MailChimp is one of the third-party mail delivery service provider MailChimp integration module. A cross-site scripting vulnerability exists in the MailChimp Signup submodule of the...

Arab Portal SQL Injection Vulnerability

Arab Portal is a set of web portals. A SQL injection vulnerability exists in Arab Portal version 3, which stems from a failure of the members.php script to adequately filter the 'showemail' parameter in the signup operation. A remote attacker could use this vulnerability to execute arbitrary SQL...

CVE-2015-6519

SQL injection vulnerability in Arab Portal 3 allows remote attackers to execute arbitrary SQL commands via the showemail parameter in a signup action to members.php...

Sql injection

SQL injection vulnerability in Arab Portal 3 allows remote attackers to execute arbitrary SQL commands via the showemail parameter in a signup action to members.php...

CVE-2015-6519

SQL injection vulnerability in Arab Portal 3 allows remote attackers to execute arbitrary SQL commands via the showemail parameter in a signup action to members.php...

COPPA error screen in FxAccounts signup allows loading arbitrary web content into B2G root process — Mozilla

Kartikaya Gupta of Mozilla reported an issue within the Firefox Accounts setup dialog that would embed content from a static external URI into the System process. An attacker in a position to control a vulnerable device's network connection could use this to inject arbitrary web content into the...

videotube.tdmu.edu.ua XSS vulnerability

Open Bug Bounty ID: OBB-55022 Description| Value ---|--- Affected Website:| videotube.tdmu.edu.ua Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...