2944 matches found
WebSummit: Time Based SQL injection in url parameter
There is possibility of inducing some time delay in the "url" parameter of the videos.websummit.com using the Benchmark and SQL queries, which could result in timeout for application upon huge delay induced into the application...
CVE-2015-7360
Multiple cross-site scripting XSS vulnerabilities in the Web User Interface WebUI in Fortinet FortiSandbox before 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 serial parameter to alerts/summary/profile/; the 2 urlForCreatingReport parameter to csearch/report/export/...
Open-Xchange: Cross-Site Scripting Vulnerability in dovecot.fi
Issue detail The name of an arbitrarily supplied URL parameter is copied into the value of an HTML tag attribute which is encapsulated in double quotation marks. The payload e400a"alert15bd8b was submitted in the name of an arbitrarily supplied URL parameter. This input was echoed as...
Drupal 6.x < 6.35 / 7.x < 7.35 Multiple Vulnerabilities
Binary data 9213.prm...
trotting-new.ru Open Redirect vulnerability
Vulnerable URL: http://trotting-new.ru/.go.php?url=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 2 VI...
CVE-2016-0949
Adobe Connect before 9.5.2 allows remote attackers to have an unspecified impact via a crafted parameter in a URL...
vip4.exlive.cn XSS vulnerability
Vulnerable URL: http://vip4.exlive.cn:89/gpsapp/jsp/2.jsp?serverip=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
weightwatchers.com.au Open Redirect vulnerability
Open Bug Bounty ID: OBB-119571 Description| Value ---|--- Affected Website:| weightwatchers.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
prisguide.no XSS vulnerability
Vulnerable URL: http://www.prisguide.no/goto.php?shopid=149=http://www.elkjop.no/product/HUM210WIFI/huawei-mediapad-m2-10-nettbrett-16-gb-wifi-solv"alert'XSSPOSED'...
Ovidentia maillist Module 4.0 - Remote File Inclusion
Ovidentia maillist Module 4.0 - Remote File Inclusion Not for kiddies! Download: http://www.ovidentia.org/index.php?tg=fileman&sAction=getFile&id=17&gr=Y&path=Downloads%2FAdd-ons%2FModules%2Fmaillist&file=maillist-4-0.zip&idf=794 PoC: maillist-4-0/programs/mlincl.php line 4...
OpenMRS 2.3 (1.11.4) - Local File Disclosure
OpenMRS 2.3 1.11.4 Local File Disclosure Vulnerability Vendor: OpenMRS Inc. Product web page: http://www.openmrs.org Affected version: OpenMRS 2.3, 2.2, 2.1, 2.0 Platform 1.11.4 Build 6ebcaf, 1.11.2 and 1.10.0 OpenMRS-TB System OpenMRS 1.9.7 Build 60bd9b Summary: OpenMRS is an application which...
idealwine.com XSS vulnerability
Vulnerable URL: https://www.idealwine.com/fr/lemarchesearch/okresults.jsp?fastOk=ok=asd=%22%3E%3Csvg%20onload=alert%28%27XSSPOSED%27%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
marchesifrederic.fr vulnerability
Vulnerable URL: http://www.marchesifrederic.fr/persistance/widgets/php/test-url.php?url=https://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 21.12.2015 Latest check for patch:| 21.12.2015 16:07 GMT Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
autotrader.ca XSS vulnerability
Vulnerable URL: http://www.autotrader.ca/cars/ford/f-150/?hprc=True=True=New-Used'--...
CVE-2015-5210
Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter...
CVE-2015-5210
Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter...
phpMyAdmin redirection function content spoofing vulnerability
phpmyadmin is an online management tool for MySQL databases. A security vulnerability exists in the redirection function of url.php in phpMyAdmin versions 4.4.x-4.4.15.1, 4.5.x-4.5.1. A remote attacker can perform content spoofing via the url parameter...
DEBIAN-CVE-2015-7873
The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via the url parameter...
