PT-2019-7157

Name of the Vulnerable Software and Affected Versions Bilboplanet version 2.0 Description A stored XSS issue exists due to improper handling of user input in the fullname parameter to the "signup.php" endpoint. Recommendations For Bilboplanet version 2.0, update the software to a version that...

CVE-2014-9919: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Bilboplanet 2.0. Stored XSS exists in the fullname parameter to signup.php...

freetorrent.fr XSS vulnerability

Open Bug Bounty ID: OBB-658393 Description| Value ---|--- Affected Website:| freetorrent.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2014-1946: Undefined Security Weakness

OpenDocMan 1.2.7 and earlier does not properly validate allowed actions, which allows remote authenticated users to bypass an intended access restrictions and assign administrative privileges to themselves via a crafted request to signup.php...

PT-2018-4183

Name of the Vulnerable Software and Affected Versions OpenDocMan versions 1.2.7 and earlier Description The issue allows remote authenticated users to bypass intended access restrictions. This is due to improper validation of allowed actions, enabling users to assign administrative privileges to...

petmemorialcenter.ca XSS vulnerability

Open Bug Bounty ID: OBB-582011 Description| Value ---|--- Affected Website:| petmemorialcenter.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nlccgasms.ca XSS vulnerability

Open Bug Bounty ID: OBB-581995 Description| Value ---|--- Affected Website:| nlccgasms.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

filesell.ir XSS vulnerability

Open Bug Bounty ID: OBB-573608 Description| Value ---|--- Affected Website:| filesell.ir Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-18194

HamayeshNegar CMS is affected in its signup component (users/signup.php). The vulnerability is a SQL injection caused by the utype parameter, allowing a remote attacker to execute arbitrary SQL commands. The exploitation details are not provided in the documents; no patch or remediation steps are...

CVE-2017-18194: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in users/signup.php in the "signup" component in HamayeshNegar CMS allows a remote attacker to execute arbitrary SQL commands via the "utype" parameter...

PT-2018-6725

Name of the Vulnerable Software and Affected Versions: HamayeshNegar CMS affected versions not specified Description: A SQL injection issue exists in the "signup" component of HamayeshNegar CMS, specifically in the users/signup.php file. This allows a remote attacker to execute arbitrary SQL...

barrieexeclimo.com XSS vulnerability

Open Bug Bounty ID: OBB-456513 Description| Value ---|--- Affected Website:| barrieexeclimo.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

CVE-2017-7410

Multiple SQL injection vulnerabilities in account/signup.php and account/signup2.php in WebsiteBaker 2.10.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 username, 2 displayname parameter...

CVE-2017-7410: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in account/signup.php and account/signup2.php in WebsiteBaker 2.10.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 username, 2 displayname parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Bilboplanet 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 tribename or 2 tags parameter in a tribes page request to user/ or the 3 userid or 4 fullname parameter to signup.php...

PT-2017-6408

Name of the Vulnerable Software and Affected Versions Bilboplanet version 2.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the tribe name or tags parameter in a tribes page request to "user/" or the user id or fullname parameter to...

planet-libre.org XSS vulnerability

Vulnerable URL: http://www.planet-libre.org/signup.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 587870 VIP website status:| No Check planet-libre.org SSL connection:| Grade: ...

pce2016.ir XSS vulnerability

Vulnerable URL: http://www.pce2016.ir/users/signup.php?utype=admin" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5287830 VIP website status:| No Check pce2016.ir SSL connection:|...

onlinemufti.com XSS vulnerability

Vulnerable URL: http://www.onlinemufti.com/signup.php?q=Basica75iy%22%3E%3Cscript%3Ealert/OPENBUGBOUNTY/%3C/script%3Etar6b Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

imagefap.com XSS vulnerability

Vulnerable URL: http://www.imagefap.com/signup.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1697 Google Pagerank| 4 VIP website status:| Yes Check imagefap.com SSL connection...