Cross Site Scripting

github.com/apache/incubator-answer is vulnerable to Cross Site Scripting. The vulnerability is due to improper neutralization of input during web page generation when user modifies their personal website. This allows attackers to inject malicious scripts into the website, which could be executed ...

sx4x4response.uk Cross Site Scripting vulnerability OBB-3920933

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

swanndri.com.au Cross Site Scripting vulnerability OBB-3920929

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

crystalcascadeshorsepark.com.au Cross Site Scripting vulnerability OBB-3920927

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2024-28985

Name of the Vulnerable Software and Affected Versions Kashipara Online Furniture Shopping Ecommerce Website version 1.0 Description A critical issue was found in the file search.php, where the manipulation of the txtSearch argument leads to SQL injection. This can be initiated remotely...

Kashipara Online Furniture Shopping E-commerce Website SQL Injection Vulnerability

Kashipara Online Furniture Shopping Ecommerce Website is a fast online shopping ecommerce website from Kashipara. A SQL injection vulnerability exists in Kashipara Online Furniture Shopping Ecommerce Website due to a SQL injection vulnerability in the prodId parameter of the prodInfo.php file...

Kashipara Online Furniture Shopping E-commerce Website Cross-site Script Vulnerability

Kashipara Online Furniture Shopping Ecommerce Website is a fast online shopping ecommerce website from Kashipara. A cross-site scripting vulnerability exists in Kashipara Online Furniture Shopping Ecommerce Website, which originates from a cross-site scripting vulnerability in the prodId paramete...

Online Furniture Shopping E-commerce Website Security Vulnerabilities

Online Furniture Shopping Ecommerce Website is an online furniture shopping ecommerce website. A security vulnerability exists in Online Furniture Shopping Ecommerce Website due to a cross-site scripting vulnerability in the txtSearch parameter of the search.php file...

PT-2024-28990

Name of the Vulnerable Software and Affected Versions Kashipara Online Furniture Shopping Ecommerce Website version 1.0 Description A critical issue has been identified, affecting the prodList.php file, where the manipulation of the prodType argument leads to SQL injection. This issue can be...

CVE-2024-4072: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. It has been classified as problematic. Affected is an unknown function of the file search.php. The manipulation of the argument txtSearch leads to cross site scripting. It is possible to launch the attack...

PT-2024-29007

Name of the Vulnerable Software and Affected Versions Kashipara Online Furniture Shopping Ecommerce Website version 1.0 Description A vulnerability was found in the Kashipara Online Furniture Shopping Ecommerce Website, affecting an unknown functionality of the file prodList.php. The manipulation...

PT-2024-29018 · Unknown · Kashipara Online Furniture Shopping Ecommerce Website

Name of the Vulnerable Software and Affected Versions: Kashipara Online Furniture Shopping Ecommerce Website version 1.0 Description: A vulnerability was found in the file prodInfo.php, where the manipulation of the prodId argument leads to cross site scripting. The attack may be launched remotel...

CVE-2024-4075: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. This affects an unknown part of the file login.php. The manipulation of the argument txtAddress leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2024-4069: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. This affects an unknown part of the file search.php. The manipulation of the argument txtSearch leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-4074: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file prodInfo.php. The manipulation of the argument prodId leads to cross site scripting. The attack may be launche...

CVE-2024-4073: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file prodList.php. The manipulation of the argument prodType leads to cross site scripting. The attack can...

CVE-2024-4071: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0 and classified as critical. This issue affects some unknown processing of the file prodInfo.php. The manipulation of the argument prodId leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2024-4070: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Kashipara Online Furniture Shopping Ecommerce Website 1.0 and classified as critical. This vulnerability affects unknown code of the file prodList.php. The manipulation of the argument prodType leads to sql injection. The attack can be initiated remotely. The...

PT-2024-29026

Name of the Vulnerable Software and Affected Versions Kashipara Online Furniture Shopping Ecommerce Website version 1.0 Description A problematic vulnerability has been found in the login.php file, where the manipulation of the txtAddress argument leads to cross-site scripting. This issue can be...

foldermate.com Cross Site Scripting vulnerability OBB-3920899

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...