3795 matches found
CVE-2015-7873
The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via the url parameter...
PT-2015-7651
Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.4.x through 4.4.15.0 phpMyAdmin versions 4.5.x through 4.5.0 Description The issue is related to the redirection feature in the url.php file, which allows remote attackers to spoof content. This is achieved by manipulatin...
CVE-2015-7873: Undefined Security Weakness
The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via the url parameter...
mounteqshop.be XSS vulnerability
Vulnerable URL: http://www.mounteqshop.be/site/error.php?url=http%3A%2F%2Fwww.mounteqshop.be%2Fnl%2Fadvancedsearch.htm%3Faction%3Dsearch%26%253Ciframestyle%3D%26pagnr%3D1%26ppp%3Dalles=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|---...
Open redirect
Open redirect vulnerability in CMSPages/GetDocLink.ashx in Kentico CMS 8.2 through 8.2.41 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the link parameter...
reebok.nl XSS vulnerability
Vulnerable URL: http://www.reebok.nl/?prefn1="...
disparbud.jabarprov.go.id XSS vulnerability
Open Bug Bounty ID: OBB-82997 Description| Value ---|--- Affected Website:| disparbud.jabarprov.go.id Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventio...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 name parameter to dashboard/settings/categories/, 2 title or 3 rel parameter to dashboard/settings/links/, or 4 url parameter to...
Open redirect
Open redirect vulnerability in the Redirect function in stageshowredirect.php in the StageShow plugin before 5.0.9 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...
sinic.gov.co XSS vulnerability
Vulnerable URL: http://www.sinic.gov.co/EscuelasMusica/autenticacion.aspx?ReturnUrl=%2fescuelasmusica%2f!prettyPhotogaleriaescuela//0,%3Cimg%20src=x%20onerror=alert%28/XSSPOSED/%29%3E/ Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:19 GMT...
CVE-2015-5461: Undefined Security Weakness
Open redirect vulnerability in the Redirect function in stageshowredirect.php in the StageShow plugin before 5.0.9 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...
StageShow <= 5.0.8 - Open Redirect
The StageShow WordPress plugin was affected by an Open Redirect security vulnerability. http://www.example.com/wp-content/plugins/stageshow/stageshowredirect.php?url=http%3A%2F%2F2buntu.com...
Open redirect
Open redirect vulnerability in SilverStripe CMS & Framework 3.1.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the returnURL parameter to dev/build...
CVE-2015-5062
Affected software: SilverStripe CMS & Framework (version 3.1.13, with references noting a fix in 3.1.14). Vulnerability type & root cause: Open redirect via the unvalidated returnURL parameter on the dev/build URL, enabling redirects to arbitrary sites and potential phishing. Impact (as described...
CVE-2015-4726
PHP remote file inclusion vulnerability in ajax/myajaxphp.php in AudioShare 2.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the config'basedir' parameter...
CVE-2015-3232
Open redirect vulnerability in the Field UI module in Drupal 7.x before 7.38 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destinations parameter...
Content Construction Kit (CCK) - Less Critical - Open Redirect - SA-CONTRIB-2015-126
The Content Construction Kit CCK project is a set of modules that allows you to add custom fields to nodes using a web browser. CCK uses a "destinations" query string parameter in URLs to redirect users to new destinations after completing an action on a few administration pages. Under certain...
CVE-2015-4135
Cross-site scripting XSS vulnerability in goto.php in phpwind 8.7 allows remote attackers to inject arbitrary web script or HTML via the url parameter...
