kvit.dk XSS vulnerability

Vulnerable URL: http://www.kvit.dk/dk/learning/article.php?id=%22%3E%3Csvg%2Fonload%3Dalert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9625879 VIP website...

EyesOfNetwork web interface cross-site scripting vulnerability (CNVD-2017-33356)

EyesOfNetwork "EON" is an open source solution that combines practical ITIL processes with a technical interface that allows its workday program. A cross-site scripting vulnerability exists in the EyesOfNetwork web interface, which allows a remote authenticated user to inject arbitrary web script...

Cross site scripting

Cross-site scripting XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the url parameter to module/moduleframe/index.php...

CVE-2017-14981: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS was discovered in ATutor before 2.2.3. The vulnerability exists due to insufficient filtration of data url in /mods/standard/rssfeeds/editfeed.php. An attacker could inject arbitrary HTML and script code into a browser in the context of the vulnerable website...

CVE-2017-14985: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the url parameter to module/moduleframe/index.php...

CVE-2017-14981

Cross-Site Scripting XSS was discovered in ATutor before 2.2.3. The vulnerability exists due to insufficient filtration of data url in /mods/standard/rssfeeds/editfeed.php. An attacker could inject arbitrary HTML and script code into a browser in the context of the vulnerable website...

PT-2017-13804

Name of the Vulnerable Software and Affected Versions EyesOfNetwork version 5.1-0 Description The issue is related to a cross-site scripting XSS vulnerability in the EyesOfNetwork web interface. This allows remote authenticated users to inject arbitrary web script or HTML via the url parameter to...

CVE-2017-14524

Multiple open redirect vulnerabilities in OpenText Documentum Administrator 7.2.0180.0055 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a 1 URL in the startat parameter to xda/help/en/default.htm or 2 /%09/ slash encoded horizontal tab slash...

CVE-2014-9686: Undefined Security Weakness

The Googlemaps plugin 3.2 and earlier for Joomla! allows remote attackers with control of a sub-domain belonging to a victim domain to cause a denial of service via the 'url' parameter to plugingooglemap3kmlprxy.php. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7428...

CVE-2014-9686

The Googlemaps plugin 3.2 and earlier for Joomla! allows remote attackers with control of a sub-domain belonging to a victim domain to cause a denial of service via the 'url' parameter to plugingooglemap3kmlprxy.php. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7428...

PT-2017-6382

Name of the Vulnerable Software and Affected Versions Joomla! Googlemaps plugin version 3.2 and earlier Description The issue allows remote attackers with control of a sub-domain belonging to a victim domain to cause a denial of service. This is achieved via the url parameter to the "plugin...

altenergymag.com XSS vulnerability

Vulnerable URL: http://www.altenergymag.com/content.php?issuenumber=1"...

PT-2017-12765

Name of the Vulnerable Software and Affected Versions Vebto Pixie Image Editor versions 1.4 through 1.7 Description A Server Side Request Forgery issue allows remote attackers to disclose information or execute arbitrary code via the url parameter to "Launderer.php" API endpoint. Recommendations...

CVE-2017-12905: Server-Side Request Forgery (SSRF)

Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote attackers to disclose information or execute arbitrary code via the url parameter to Launderer.php...

laod.cn Open Redirect vulnerability

Open Bug Bounty ID: OBB-311163 Description| Value ---|--- Affected Website:| laod.cn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

eveningecho.ie XSS vulnerability

Vulnerable URL: http://www.eveningecho.ie/?s%3D%22%3E%3Csvg%20onload%3Dalert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 221873 VIP website status:| No...

CVE-2017-14509

An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before 7.8.2.2, and 7.9.x before 7.9.2.0 and Sugar Community Edition 6.5.26. A remote file inclusion has been identified in the Connectors module allowing authenticated users to include remotely accessible system files via a...

supporters.yaf.org XSS vulnerability

Vulnerable URL: http://supporters.yaf.org/events/?filtercategory=supporter-eventssite=1'%22%26%25prompt/OPENBUGBOUNTY/...

Cross-site Scripting (XSS) Through URL Parameter

The Play Framework is vulnerable to cross-site scripting XSS. An XSS vulnerability has been found in Plays URL rendering. This vulnerability allows attackers to insert and execute arbitrary code...

CVE-2013-7429: XML Injection (aka Blind XPath Injection)

The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the url parameter to plugingooglemap2proxy.php...