574 matches found
CVE-2018-11487
PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the query string to news.php or about.php...
about-payments.com XSS vulnerability
Open Bug Bounty ID: OBB-605493 Description| Value ---|--- Affected Website:| about-payments.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
about-tea.de XSS vulnerability
Open Bug Bounty ID: OBB-601645 Description| Value ---|--- Affected Website:| about-tea.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
SQL Injection Vulnerability in about.asp page of Ebay's website builder system
Ltd. is a brand of Jinan Dotchuang Network Technology Co., Ltd, which is a high-tech network and software technology service provider and operator in Shandong Province. SQL injection vulnerability exists in the about.asp page of Ebay's website building system, which can be exploited by attackers ...
Mozilla Firefox Content Restriction Bypass Vulnerability
Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. A content restriction bypass vulnerability exists in Mozilla Firefox. A remote user can invoke the 'view-source:' URL to bypass content restrictions and view potentially sensitive information i...
UBUNTU-CVE-2018-5134
WebExtensions may use "view-source:" URLs to view local "file:" URL content, as well as content stored in "about:cache", bypassing restrictions that only allow WebExtensions to view specific content. This vulnerability affects Firefox 59...
Progress Sitefinity Cross-Site Scripting Vulnerability (CNVD-2018-05684)
Progress Sitefinity is an open source platform for building corporate websites and intranets. A cross-site scripting vulnerability exists in Progress Sitefinity version 9.1. The vulnerability can be exploited by remote attackers to inject malicious JavaScript code via the Last name, First name, a...
CVE-2017-18177
Progress Sitefinity 9.1 has XSS via the Last name, First name, and About fields on the New User Creation Page. This is fixed in 10.1...
CVE-2018-5286
The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-about page...
CVE-2018-5287
The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-about page...
Security Bulletin: NVIDIA SHIELD TV Security Updates for CPU Speculative Side Channel Vulnerabilities
NVIDIA SHIELD TV Response to CPU Speculative Side Channel Vulnerabilities - CVE-2017-5753, CVE-2017-5715, CVE-2017-5754 Bulletin Summary NVIDIA is providing an initial security update to mitigate aspects of Google Project Zero's January 3, 2018, publication of novel information disclosure attacks...
Tizen Studio 1.3 Smart Development Bridge Buffer Overflow
Exploit Title: Smart Development Bridge =2.3.2 part of Tizen Studio 1.3 Windows x86/x64 - Buffer Overflow PoC Date: 22.10.17 Exploit Author: Marcin Kopec Vendor Homepage: https://developer.tizen.org/ Software Link: https://developer.tizen.org/development/tizen-studio/download Version: 2.3.0, 2.3....
allaboutjazz.com XSS vulnerability
Vulnerable URL:...
UBUNTU-CVE-2017-7816
WebExtensions could use popups and panels in the extension UI to load an "about:" privileged URL, violating security checks that disallow this behavior. This vulnerability affects Firefox 56...
Stored Cross-Site Scripting Vulnerability in the YoYo Housing App
YouYouGoodHouse app is a rental app created by Chengdu GoodHouse Technology Co. A stored cross-site scripting vulnerability exists in the "About Us" section of the YouYouHaoRooms app. An attacker can insert malicious js code into the page to obtain user cookies and other information, resulting in...
agroit.eu XSS vulnerability
Vulnerable URL: https://www.agroit.eu/SitePages/About.aspx?FollowSite=0=%27-confirm%27OPENBUGBOUNTY%27-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9886051 VIP website status...
SQL Injection Vulnerability in about.php Page of HopYoung Website Builder System
The Hop-Up Network Building System is a website building system. A SQL injection vulnerability exists in the about.php page of the HopYoung website builder system, which can be exploited by attackers to obtain sensitive information from the database...
SQL injection vulnerability in the class2id parameter of the about.php page of the website building system of Kunming Senyu Technology Co.
Kunming Senyu Technology Co., Ltd. is a website building system. There is a SQL injection vulnerability in the class2id parameter on the about.php page of Kunming Senyu Technology Co. Attackers can use this vulnerability to obtain sensitive database information...
SQL Injection and Cross-site Scripting Vulnerabilities in Yitianlian's Enterprise Website Builder
Shenzhen Yitianlian Technology Co., Ltd. is a network operator providing online marketing services for enterprises. SQL injection and cross-site scripting vulnerabilities exist in the about.php and list.php parameters of the Yitianlian website builder system, which can be exploited by an attacker...