2942 matches found
CVE-2017-8896
ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2 are vulnerable to XSS on error pages by injecting code in url parameters...
A logged in back end user can include arbitrary existing PHP files by manipulating an URL parameter
More info at https://contao.org/en/news/contao-441.html...
A logged in back end user can include arbitrary existing PHP files by manipulating an URL parameter
More info at https://contao.org/en/news/contao-441.html...
A logged in back end user can include arbitrary existing PHP files by manipulating an URL parameter
More info at https://contao.org/en/news/contao-3528.html...
PHP file inclusion in the back end
Date : 2017-07-12 CVE ID : CVE-2017-10993 Description A logged in back end user can include arbitrary PHP files by manipulating an URL parameter. Since Contao does not allow to upload PHP files in the file manager, the attack is limited to the existing PHP files on the server. Affected versions...
encommun.stm.info XSS vulnerability
Open Bug Bounty ID: OBB-262500 Description| Value ---|--- Affected Website:| encommun.stm.info Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
stihlse.com XSS vulnerability
Vulnerable URL: http://www.stihlse.com/account/periodbal.php?per=1"...
ranguitars.com XSS vulnerability
Vulnerable URL: http://ranguitars.com/index.php/hate?artist=1"...
perseus.tufts.edu XSS vulnerability
Vulnerable URL: http://www.perseus.tufts.edu/hopper/morph?l=1"...
cocopsych.org XSS vulnerability
Vulnerable URL: http://www.cocopsych.org/index.php?Target=practice=search.php=1"...
brownsnursery.com XSS vulnerability
Vulnerable URL: http://www.brownsnursery.com/doptg/index.php?galleryid=1/-///'/"//--...
Inflection: XSS at https://app.goodhire.com/member/GH.aspx
Unescaped input from a URL parameter in the checkout flow was being used as a JavaScript variable for determining what cart contents to render. By manipulating the URL parameter, the researcher was able to execute arbitrary JavaScript on the page...
MapsMarker.com e.U.: Cross-site Scripting (XSS) in /updates-pro/archive/
Hey guys. The dir parameter on /updates-pro/archive/ seems to be vulnerable to Cross-site Scripting. Steps to reproduce: 1- Navigate to: https://www.mapsmarker.com/updates-pro/archive/?dir=v3.0.1 2- Add this to the url: 3- Result in attached printsceen. Or quite simple visit:...
CVE-2017-7343
An open redirect vulnerability in Fortinet FortiPortal 4.0.0 and below allows attacker to execute unauthorized code or commands via the url parameter...
Open redirect
An open redirect vulnerability in Fortinet FortiPortal 4.0.0 and below allows attacker to execute unauthorized code or commands via the url parameter...
almiur.ru XSS vulnerability
Vulnerable URL: http://almiur.ru/versesearch.php?VerseName=asfvasfvalert'OPENBUGBOUNTY'...
CVE-2015-4070
CVE-2015-4070: Open redirect vulnerability in Wow Moodboard Lite plugin for WordPress (version 1.1.1.1) affecting the proxyimages function in wowproxy.php. Attackers can redirect users to arbitrary sites via the url parameter, enabling phishing. The provided documents confirm the vulnerability bu...
CVE-2015-4070
Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite plugin 1.1.1.1 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...
anton.biz XSS vulnerability
Vulnerable URL: http://www.anton.biz/Suche?search=%22%3Eblub%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3410252 VIP website...