linuxundich.de XSS vulnerability

Open Bug Bounty ID: OBB-280170 Description| Value ---|--- Affected Website:| linuxundich.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

liman.az XSS vulnerability

Vulnerable URL: http://www.liman.az/wp-admin/admin-ajax.php?tdthemename=Newspaper=7.8 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 281602 VIP website status:| No Check liman.az S...

ivoirmixdj.com XSS vulnerability

Vulnerable URL: https://ivoirmixdj.com/wp-admin/admin-ajax.php?tdthemename=Newspaper=7.2 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 180640 VIP website status:| No Check...

fashionghana.com XSS vulnerability

Vulnerable URL: https://www.fashionghana.com/wp-admin/admin-ajax.php?tdthemename=Newspaper=8.1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 468765 VIP website status:| No Coordinated Disclosure Timeline:...

olisa.tv XSS vulnerability

Vulnerable URL: https://www.olisa.tv/wp-admin/admin-ajax.php?tdthemename=Newspaper=8.1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 104768 VIP website status:| No Coordinated Disclosure Timeline: Description|...

yavmode.ru XSS vulnerability

Open Bug Bounty ID: OBB-279801 Description| Value ---|--- Affected Website:| yavmode.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

talkchelsea.net XSS vulnerability

Open Bug Bounty ID: OBB-279752 Description| Value ---|--- Affected Website:| talkchelsea.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

posizionamento-seo.com XSS vulnerability

Open Bug Bounty ID: OBB-279744 Description| Value ---|--- Affected Website:| posizionamento-seo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tomatoheart.com XSS vulnerability

Open Bug Bounty ID: OBB-279735 Description| Value ---|--- Affected Website:| tomatoheart.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tvguru.cz XSS vulnerability

Vulnerable URL: http://www.tvguru.cz/wp-admin/admin-ajax.php?tdthemename=Newspaper=8.1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 233179 VIP website status:| No Coordinated Disclosure Timeline: Description|...

fokus.mk XSS vulnerability

Open Bug Bounty ID: OBB-278814 Description| Value ---|--- Affected Website:| fokus.mk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

elcaribe.com.do XSS vulnerability

Open Bug Bounty ID: OBB-278813 Description| Value ---|--- Affected Website:| elcaribe.com.do Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Sql injection

The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has SQL injection with these wp-admin/admin-ajax.php POST actions: catalogueupdateorder list-item, videoupdateorder video-item, imageupdateorder list-item, taggroupupdateorder listitem, categoryproductsupdateorder...

CVE-2017-12199

The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has SQL injection with these wp-admin/admin-ajax.php POST actions: catalogueupdateorder list-item, videoupdateorder video-item, imageupdateorder list-item, taggroupupdateorder listitem, categoryproductsupdateorder...

CVE-2017-12199: Improper Neutralization of Special Elements used in an SQL Command

The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has SQL injection with these wp-admin/admin-ajax.php POST actions: catalogueupdateorder list-item, videoupdateorder video-item, imageupdateorder list-item, taggroupupdateorder listitem, categoryproductsupdateorder...

WP Support Plus Responsive Ticket System < 8.0.0 - Privilege Escalation

You can login as anyone without knowing password because of incorrect usage of wpsetauthcookie. Username:...

spacehost.de XSS vulnerability

Vulnerable URL: https://spacehost.de/blog/wp-admin/admin-ajax.php Details: Description| Value ---|--- Patched:| Yes, at 14.05.2017 Latest check for patch:| 14.05.2017 20:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1786851 VIP website status:| No Check...

trittin.de XSS vulnerability

Vulnerable URL: https://www.trittin.de/wp-admin/admin-ajax.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check trittin.de SSL...

druckerei-hellendoorn.de XSS vulnerability

Vulnerable URL: http://www.druckerei-hellendoorn.de/wp-admin/admin-ajax.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

CVE-2016-10148

The wpajaxupdateplugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 makes a getplugindata call before checking the updateplugins capability, which allows remote authenticated users to bypass intended read-access restrictions via the plugin parameter to...