Web Application Sitemap

The remote web server contains linkable content that can be used to gather information about a target. C Tenable Network Security, Inc. if NASLLEVEL 5201 exit0, "webmirror3.nbin is required."; include"compat.inc"; ifdescription scriptid91815; scriptversion "$Revision: 1.1 $"; scriptcvsdate"$Date:...

XML Sitemap - Moderately Critical - XSS - SA-CONTRIB-2016-030

The XML Sitemap module enables you to create sitemaps which help search engines to more intelligently crawl a website and keep their results up to date. The module doesn't sufficiently filter the URL when it is displayed in the sitemap. This vulnerability is mitigated if the setting for "Include ...

cdn.attracta.com XSS vulnerability

Vulnerable URL: https://cdn.attracta.com/sitemap/338118/search.html?q=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

e-planet.ru XSS vulnerability

Vulnerable URL: http://e-planet.ru/sitemap/search/?searchquery=' autofocus onfocus='alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 17:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 443960...

Cross-Site Scripting in extension "Google Sitemap" (enter_new_weeaar_googlesitemap)

It has been discovered that the extension "Google Sitemap" enternewweeaargooglesitemap is susceptible to Cross-Site Scripting. Release Date: March 03, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.0.0 and...

WordPress Google Sitemap 2.9.1 Cross Site Scripting

Plugin Name : Google Sitemap Effected Version : 2.9.1 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept :...

taaz.com XSS vulnerability

Vulnerable URL: http://www.taaz.com/sitemap.html/1" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 76793 Google Pagerank| 5 VIP website status:| No Check taaz.com SSL connection:|...

CVE-2015-4353

Cross-site request forgery CSRF vulnerability in the Custom Sitemap module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete sitemaps via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Custom Sitemap module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete sitemaps via unspecified vectors...

CVE-2015-4353

Cross-site request forgery CSRF vulnerability in the Custom Sitemap module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete sitemaps via unspecified vectors...

CVE-2015-4353

The CVE-2015-4353 entry concerns Drupal’s Custom Sitemap contributed module, which is vulnerable to Cross-Site Request Forgery (CSRF). The issue allows an attacker to induce an administrator’s browser to perform actions that delete sitemaps, effectively hijacking admin actions via CSRF. Affected ...

PT-2015-6535

Name of the Vulnerable Software and Affected Versions Drupal affected versions not specified Description A cross-site request forgery CSRF issue in the Custom Sitemap module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete sitemaps...

CVE-2015-4353: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Custom Sitemap module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete sitemaps via unspecified vectors...

Using scrapy crawl sebug vulnerability database-vulnerability warning-the black bar safety net

! Due to the project need to grab the sebug of the vulnerability database content, using the scrapy framework simple has written a gripping sebug the crawler, and stored in a database, mysql or mongodb, here to mysql, for example. About scrapy Scrapy, Python, development of a quick,high-level...

Drupal Custom Sitemap Module Cross-Site Request Forgery Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Custom Sitemap is one of the custom sitemap modules. A cross-site request forgery vulnerability exists in the Drupal Custom Sitemap module due to the program failing to properly validat...

CVE-2014-9526

Multiple cross-site scripting XSS vulnerabilities in concrete5 5.7.2.1, 5.7.2, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 gName parameter in singlepages/dashboard/users/groups/bulkupdate.php or 2 instanceid parameter in tools/dashboard/sitemapdragrequest.p...

PT-2015-4267

Name of the Vulnerable Software and Affected Versions concrete5 versions 5.7.2.1 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via vulnerable parameters. Specifically, the gName parameter in "single pages/dashboard/users/groups/bulkupdate.php" an...

Concrete5 CMS Reflected Cross-Site Scripting Vulnerabilities

Title: Concrete5 CMS Reflected Cross-Site Scripting Vulnerabilities Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered: 02 November 2014 Updated: 9 December 2014 Published: 9 December 2014 MorXploit Research http://www.MorXploit.com Vendor: Concrete5 Vendor url: www.concrete5.org...

CVE-2014-6291

Cross-site scripting XSS vulnerability in the Alphabetic Sitemap alphasitemap extension 0.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Alphabetic Sitemap alphasitemap extension 0.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...