theinstitutes.org XSS vulnerability

Vulnerable URL: https://www.theinstitutes.org/hf.php?page=webutil.msgscreen=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

The vulnerability of Microsoft SharePoint Foundation’s electronic document management software allows a hacker to execute a cross-script in a local security context.

The vulnerability of Microsoft SharePoint Foundation’s electronic document management software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute a cross-script in the local security context remotely...

The vulnerability of the Cisco Unified Computing System Central’s centralized device management system allows a intruder to inject arbitrary Web or HTML code.

The vulnerability of the control interface of the Cisco Unified Computing System Central device exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code by entering special parameters...

suitecrm.com XSS vulnerability

Vulnerable URL: https://suitecrm.com/wiki/thumb.php?f=xssposed%23%3Cbody%09onload=confirm%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:42 GMT Vulnerability type:| XSS Vulnerability...

The vulnerability in the Microsoft SharePoint Server corporate application suite, a software solution for electronic document management called Microsoft SharePoint Foundation, allows attackers to carry out XSS attacks and circumvent existing access control policies.

The vulnerability of the Microsoft SharePoint Server corporate application and the Microsoft SharePoint Foundation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and...

The vulnerability of the Business Process Manager system allows a perpetrator to inject arbitrary web or HTML code.

The vulnerability of the Business Process Manager system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code using a specially crafted URL...

Federal Agencies to Move to HTTPS-Only Connections

Following the lead of many major Web services, the White House on Monday announced that it would move all of the federal government’s public sites and services to HTTPS-only. Tony Scott, the federal CIO, has issued a memorandum to all federal agencies and departments instructing them to move all ...

Cart Software - Multiple Vulnerabilities

========================================================= sabadkharid CMS Multiple Vulnerabilities ========================================================= Exploit Title: sabadkharid CMS Multiple Vulnerabilities Date: 8/07/2011 Author: hosinn Software Link: http://www.sabadkharid.com Version:...

Webradev Download Protect 1.0 - Remote File Inclusion

Webradev Download Protect v1.0 Remote File Inclusion ======================================================== Author : asL-Sabia = = Home : www.v4-Team.com = = email: [email protected] = = = scripts :...

Pre News Manager v1.0

Pre News Manager v1.0 Homepage: http://www.preprojects.com/news.asp Description: Effected files: index.php newsdetail.php emailstory.php thankyou.php printableview.php tellafriend.php sendcomments.php Exploits & Vulns: XSS Vulnerabilities: By inserting IMG20"""SCRIPTalert"XSS"/SCRIPT" onto the id...