ottpi-archive.aphp.fr. XSS vulnerability

Open Bug Bounty ID: OBB-86620 Description| Value ---|--- Affected Website:| ottpi-archive.aphp.fr. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

omsinc.in XSS vulnerability

Vulnerable URL: http://www.omsinc.in/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= Rahul Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15379222 Google Pagerank| 0 VIP...

coorgvacations.in XSS vulnerability

Vulnerable URL: http://coorgvacations.in/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= Rahul Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15376895 Google Pagerank| 0...

vayavyalabs.com XSS vulnerability

Vulnerable URL: http://vayavyalabs.com/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= Rahul Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1659207 Google Pagerank| 3 VIP...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a saveWorkerPeek action...

CVE-2015-6545

Cross-site request forgery CSRF vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a saveWorkerPeek action...

CVE-2015-6545

CVE-2015-6545: A CSRF flaw in Cerb (Webgroup Media LLC) affects the ajax.php endpoint, enabling an authenticated attacker to add an administrator account via the saveWorkerPeek action. Affected version(s): Cerb 7.0.3 and likely earlier; fixed in Cerb 7.0.4. Impact: unauthorized creation of admin ...

Cerb 7.0.3 - Cross-Site Request Forgery

Advisory ID: HTB23269 Product: Cerb Vendor: Webgroup Media LLC Vulnerable Versions: 7.0.3 and probably prior Tested Version: 7.0.3 Advisory Publication: August 12, 2015 without technical details Vendor Notification: August 12, 2015 Vendor Patch: August 14, 2015 Public Disclosure: September 2, 201...

Cerb Cross-Site Request Forgery Vulnerability

Cerb is a fast and flexible web-based business collaboration and automation platform. A cross-site request forgery vulnerability exists in Cerb. The "/ajax.php" script fails to properly validate the origin of incoming HTTP requests. The vulnerability could be exploited to allow an attacker to gai...

ralphwendel.fr XSS vulnerability

Vulnerable URL: http://www.ralphwendel.fr/wp-admin/admin-ajax.php?action=revsliderajaxactionaction=%3Ch1%3ER3NW4%3Cbr%3E%3Cbr%3E%3Cbr%3E%3Cbr%3E%3Cimg%20src=x%20onerror=prompt%28String.fromCharCode%2847,88,83,83,80,79,83,69,68,47%29%29%20/%3E%3C!-- Details: Description| Value ---|--- Patched:| Ye...

essexyouthbuild.co.uk XSS vulnerability

Vulnerable URL: http://essexyouthbuild.co.uk/wp-admin/admin-ajax.php?action=revsliderajaxactionaction=%3Ch1%3ER3NW4%3Cbr%3E%3Cbr%3E%3Cbr%3E%3Cbr%3E%3Cimg%20src=x%20onerror=prompt%28String.fromCharCode%2847,88,83,83,80,79,83,69,68,47%29%29%20/%3E%3C!-- Details: Description| Value ---|--- Patched:|...

locksolution4u.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-83581 Description| Value ---|--- Affected Website:| locksolution4u.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

blackhawkghad.com XSS vulnerability

Open Bug Bounty ID: OBB-83568 Description| Value ---|--- Affected Website:| blackhawkghad.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

socalurbanfarms.com XSS vulnerability

Open Bug Bounty ID: OBB-83543 Description| Value ---|--- Affected Website:| socalurbanfarms.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

salsaole.ca XSS vulnerability

Open Bug Bounty ID: OBB-83516 Description| Value ---|--- Affected Website:| salsaole.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

quantdev.ssri.psu.edu XSS vulnerability

Vulnerable URL: http://quantdev.ssri.psu.edu/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= Derp Details: Description| Value ---|--- Patched:| Yes, at 12.04.2016 Latest check for patch:| 12.04.2016 16:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

jezeph.co.uk XSS vulnerability

Vulnerable URL: http://www.jezeph.co.uk/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= Derp Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

charterglobal.com XSS vulnerability

Vulnerable URL: http://charterglobal.com/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= I R DERP Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

bluefinch.nl XSS vulnerability

Vulnerable URL: http://bluefinch.nl/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= I R DERP Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

visitsouthbend.com XSS vulnerability

Vulnerable URL: http://visitsouthbend.com/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= I R DERP Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...