report.az XSS vulnerability

Open Bug Bounty ID: OBB-397620 Description| Value ---|--- Affected Website:| report.az Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

medilab.com.mx XSS vulnerability

Open Bug Bounty ID: OBB-391536 Description| Value ---|--- Affected Website:| medilab.com.mx Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

boardlife.co.kr XSS vulnerability

Vulnerable URL: http://boardlife.co.kr/?id=%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 83240 VIP website status:| No Coordinated Disclosure Timeline: Description|...

CVE-2017-12294

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the...

Cross site scripting

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the...

auxiliadora.net XSS vulnerability

Open Bug Bounty ID: OBB-385660 Description| Value ---|--- Affected Website:| auxiliadora.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

[20180509] - Core - XSS vulnerability in the media manager

Inadequate filtering of file and folder names lead to various XSS attack vectors in the media manager...

Rails vulnerable to Cross-site Scripting

There is an XSS vulnerability in the numbertocurrency, numbertopercentage and numbertohuman helpers in Ruby on Rails. This vulnerability has been assigned the CVE identifier CVE-2014-0081. Versions Affected: All. Fixed Versions: 4.1.0.beta2, 4.0.3, 3.2.17. Impact ------ These helpers allows users...

urjaglobal.in XSS vulnerability

Vulnerable URL: http://www.urjaglobal.in/product.php?page=11=sch=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3310088 VIP website status:| No Coordinate...

kitchencabinetsanddesignsonline.com XSS vulnerability

Vulnerable URL: http://www.kitchencabinetsanddesignsonline.com/sitesearch.aspx?keywords=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%22OPENBUGBOUNTY%22%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:|...

Cross site scripting

A vulnerability in the web framework code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input validation of some parameter...

Cross site scripting

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the...

CVE-2017-12272

CVE-2017-12272 affects Cisco IOS XE Software Web Framework, where insufficient input validation in the web server enables unauthenticated, remote attackers to perform a cross-site scripting (XSS) attack. The exploit requires the victim to visit a malicious link or for an attacker to intercept a u...

CVE-2017-15571

CVE-2017-15571 affects Redmine prior to 3.2.8, 3.3.x prior to 3.3.5, and 3.4.x prior to 3.4.3. The vulnerability is a cross-site scripting (XSS) flaw in app/views/issues/_list.html.erb caused by crafted column data, enabling injection of HTML/script in affected deployments. Connected sources conf...

search.eshield.com XSS vulnerability

Vulnerable URL:...

shop.accesso.com XSS vulnerability

Vulnerable URL: https://shop.accesso.com/affiliate/sixflagsBlast/template/Ride1.php?username===5007=Fulton+County+Government=https://shop.accesso.com/clients/sixflags/affiliate/index.php?m=12907ℑ=xss%22%20onerror=prompt%27openbugbounty%27%20%22 Details: Description| Value ---|--- Patched:| No...

sun-sentinel.com XSS vulnerability

Open Bug Bounty ID: OBB-336427 Description| Value ---|--- Affected Website:| sun-sentinel.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

finken.de XSS vulnerability

Vulnerable URL: http://www.finken.de/catalogsearch/result?q=%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C%2Fscript%3E\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 873634 VIP website...

SUSE-SU-2017:2655-1 Security update for portus

This update for portus fixes the following issues: - CVE-2017-14621: Fixed a XSS attack via the Team field, related to typeahead. bsc1059664...

Cross site scripting

A vulnerability in the web UI of Cisco Spark Messaging Software could allow an authenticated, remote attacker to perform a stored cross-site scripting XSS attack. The vulnerability is due to insufficient input validation by the web UI of the affected software. An attacker could exploit this...