3794 matches found
almiur.ru XSS vulnerability
Vulnerable URL: http://almiur.ru/versesearch.php?VerseName=asfvasfvalert'OPENBUGBOUNTY'...
CVE-2015-4070
Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite plugin 1.1.1.1 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...
CVE-2015-4070
CVE-2015-4070: Open redirect vulnerability in Wow Moodboard Lite plugin for WordPress (version 1.1.1.1) affecting the proxyimages function in wowproxy.php. Attackers can redirect users to arbitrary sites via the url parameter, enabling phishing. The provided documents confirm the vulnerability bu...
CVE-2015-4070: URL Redirection to Untrusted Site
Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite plugin 1.1.1.1 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...
PT-2017-6728
Name of the Vulnerable Software and Affected Versions Wow Moodboard Lite plugin version 1.1.1.1 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter. This is related to an open redirect vulnerability in...
anton.biz XSS vulnerability
Vulnerable URL: http://www.anton.biz/Suche?search=%22%3Eblub%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3410252 VIP website...
PT-2017-5081
Name of the Vulnerable Software and Affected Versions: Umbraco version 4.7.0 Description: The issue allows remote attackers to proxy requests on their behalf. This is achieved via the url parameter in the FeedProxy.aspx script. Recommendations: For Umbraco version 4.7.0, consider restricting acce...
CVE-2012-1301: Improper Input Validation
The FeedProxy.aspx script in Umbraco 4.7.0 allows remote attackers to proxy requests on their behalf via the "url" parameter...
humus.name XSS vulnerability
Vulnerable URL: http://www.humus.name/index.php?page=Textures"alert/OPENBUGBOUNTY/...
Multiple Jensen of Scandinavia Air:Link 'return-url' parameter open redirect vulnerability
Air:Link 3G, Air:Link 5000AC, Air:Link 59300 are routers from Jensen of Scandinavia, Norway. An open redirect vulnerability exists in the handling of the 'return-url' parameter on the /goform/formLogout page of multiple Jensen of Scandinavia Air:Link products. An attacker can construct a maliciou...
Multiple Jensen of Scandinavia Air:Link Open Redirect Vulnerabilities
Air:Link 3G, Air:Link 5000AC, Air:Link 59300 are routers from Jensen of Scandinavia, Norway. An open redirect vulnerability exists in the handling of the 'submit-url' parameter on the /goform/ page of multiple Jensen of Scandinavia Air:Link products. An attacker can construct a malicious URI, tri...
Open redirect
Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the submit-url parameter to certain /goform/ pages...
CVE-2016-10315
Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the submit-url parameter to certain /goform/ pages...
CVE-2016-10315
Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the submit-url parameter to certain /goform/ pages...
Open redirect
Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the return-url parameter to /goform/formLogout...
Sql injection
SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote authenticated administrators to execute arbitrary SQL commands via the url parameter to findusers.php. An example attack uses "into outfile" to create a backdoor program...
CVE-2017-7290: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote authenticated administrators to execute arbitrary SQL commands via the url parameter to findusers.php. An example attack uses "into outfile" to create a backdoor program...
PT-2017-17639
Name of the Vulnerable Software and Affected Versions XOOPS versions prior to 2.5.8.1 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This can be achieved via the url parameter to the "findusers.php" endpoint. An example attack uses "into outfil...
shoptilyoudrop.esy.es XSS vulnerability
Vulnerable URL: http://shoptilyoudrop.esy.es/link.php?url=javascript:alert%28/OPENBUGBOUNTY/%29 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...