seznamka.sms.cz XSS vulnerability

Vulnerable URL: http://seznamka.sms.cz/index.php?Pidkategorie=7630soubor=student%2Findex.php%3Fakce%3Dhledej%26akceHledej%3D1%26hlKde1%3D1%26studweb%3D0%26hlText%3D%2527%2522%253E%25%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest che...

CVE-2016-1916

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote authenticated users to inject arbitrary web script or HTML by leveraging basic administrative access to create a crafted policy, leading to improper rendering on a...

pfSense Firewall Cross-Site Request Forgery Vulnerability

pfSense is a free, open-source customized version of FreeBSD designed for use as a firewall and router. pfSense suffers from a cross-site request forgery vulnerability. diagbackup.php does not validate all functions sufficiently. Allows an attacker to upload malicious files...

Cyberoam CC v02.03.1 - Multiple Persistent Vulnerabilities

Document Title: =============== Cyberoam CC v02.03.1 - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1721 Cyberoam Ticket ID: 1001314 Case ID: CCC-4208 Release Date: ============= 2016-04-18 Vulnerability Laboratory ...

WordPress Plugin Kento Post View Counter 2.8 - Cross-Site Request Forgery Cross-Site Scripting

WordPress Plugin Kento Post View Counter 2.8 - Cross-Site Request Forgery Cross-Site Scripting I would like to disclose CSRF and stored XSS vulnerability in Kento post view counter plugin version 2.8 . The vulnerable Fields for XSS are kentopvcnumberslang kentopvctodaytext kentopvctotaltext The...

Cyberoam CC v02.03.1 - Multiple Persistent Vulnerabilities

Document Title: =============== Cyberoam CC v02.03.1 - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1721 Cyberoam Ticket ID: 1001314 Case ID: CCC-4208 Release Date: ============= 2016-04-17 Vulnerability Laboratory ...

Remote code execution

Microsoft XML Core Services 3.0 allows remote attackers to execute arbitrary code via a crafted web site, aka "MSXML 3.0 Remote Code Execution Vulnerability."...

DotCMS Cross-Site Scripting Vulnerability

DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A cross-site scripting vulnerability exists in DotCMS 3.5 Beta. An attacker can exploit this vulnerability to...

Quicksilver HQ VoHo Concept4E CMS 1.0 SQL Injection

Document Title: =============== Quicksilver HQ VoHo Concept4E CMS v1.0 - Multiple SQL Injection Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1816 Release Date: ============= 2016-04-06 Vulnerability Laboratory ID VL-ID:...

FortiManager / FortiAnalyzer 5.x Script Insertion

Document Title: =============== FortiManager & FortiAnalyzer 5.x Appliance Application - filename Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1687 Fortinet PSIRT ID: 1624561 Release Date: ============= 2016-04-04...

Techsoft WS CMS 2016 Q2 - SQL Injection Web Vulnerability

Document Title: =============== Techsoft WS CMS 2016 Q2 - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1810 Release Date: ============= 2016-04-03 Vulnerability Laboratory ID VL-ID: ====================================...

DirectAdmin CP 1.50.0 Cross Site Request Forgery

Document Title: =============== DirectAdmin CP v1.50.0 - CS CSRF Web Vulnerability References Source: ==================== http://ehsansec.ir/advisories/directadmin-xsrf.txt http://www.vulnerability-lab.com/getcontent.php?id=1783 Release Date: ============= 2016-03-23 Vulnerability Laboratory ID...

DirectAdmin CP v1.50.0 - CS CSRF Web Vulnerability

Document Title: =============== DirectAdmin CP v1.50.0 - CS CSRF Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1783 Release Date: ============= 2016-03-20 Vulnerability Laboratory ID VL-ID: ==================================== 1783...

DirectAdmin CP v1.50.0 - CS CSRF Web Vulnerability

Document Title: =============== DirectAdmin CP v1.50.0 - CS CSRF Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1783 Release Date: ============= 2016-03-20 Vulnerability Laboratory ID VL-ID: ==================================== 1783...

农友政务系统 /ckq/sllistout.aspx tname 参数SQL注入漏洞

No description provided by source...

Chamlio LMS v1.10.2 - (Profile) Persistent Web Vulnerability

Document Title: =============== Chamlio LMS v1.10.2 - Profile Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1781 Release Date: ============= 2016-03-13 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2016-0107

CVE-2016-0107 affects Microsoft Internet Explorer (IE) 9–11 and relatedly Microsoft Edge, where memory corruption can be triggered by a crafted web site, enabling remote code execution or memory corruption. This family is the same IE memory corruption issue as other CVEs in 2016-0105/0107/0111/01...

store.w-t-c.web-republic.de XSS vulnerability

Vulnerable URL: http://store.w-t-c.web-republic.de/shopcontent.php?coID=" accesskey=x onclick=alert/XSSPOSED/// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Fing v3.3.0 iOS - Persistent Mail Encoding Vulnerability

Document Title: =============== Fing v3.3.0 iOS - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1772 Release Date: ============= 2016-02-28 Vulnerability Laboratory ID VL-ID: ====================================...

WP Good News Themes - CS Cross Site Web Vulnerability

Document Title: =============== WP Good News Themes - CS Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1771 Release Date: ============= 2016-02-28 Vulnerability Laboratory ID VL-ID: ==================================== 1771...