blackhawkghad.com XSS vulnerability

Open Bug Bounty ID: OBB-83568 Description| Value ---|--- Affected Website:| blackhawkghad.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

socalurbanfarms.com XSS vulnerability

Open Bug Bounty ID: OBB-83543 Description| Value ---|--- Affected Website:| socalurbanfarms.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

salsaole.ca XSS vulnerability

Open Bug Bounty ID: OBB-83516 Description| Value ---|--- Affected Website:| salsaole.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

quantdev.ssri.psu.edu XSS vulnerability

Vulnerable URL: http://quantdev.ssri.psu.edu/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= Derp Details: Description| Value ---|--- Patched:| Yes, at 12.04.2016 Latest check for patch:| 12.04.2016 16:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

jezeph.co.uk XSS vulnerability

Vulnerable URL: http://www.jezeph.co.uk/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= Derp Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

charterglobal.com XSS vulnerability

Vulnerable URL: http://charterglobal.com/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= I R DERP Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

bluefinch.nl XSS vulnerability

Vulnerable URL: http://bluefinch.nl/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= I R DERP Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

visitsouthbend.com XSS vulnerability

Vulnerable URL: http://visitsouthbend.com/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= I R DERP Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

lumishow.com.br XSS vulnerability

Vulnerable URL: http://www.lumishow.com.br/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= I R DERP Details: Description| Value ---|--- Patched:| Yes, at 16.09.2015 Latest check for patch:| 16.09.2015 01:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

h1club.com XSS vulnerability

Vulnerable URL: http://www.h1club.com/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= derp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3260171 Google Pagerank| 3 VIP...

voetzorgnoord.nl XSS vulnerability

Open Bug Bounty ID: OBB-79870 Description| Value ---|--- Affected Website:| voetzorgnoord.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

gorenveincenter.com XSS vulnerability

Vulnerable URL: http://gorenveincenter.com/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= derp Details: Description| Value ---|--- Patched:| Yes, at 22.09.2015 Latest check for patch:| 22.09.2015 01:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

colin.se XSS vulnerability

Vulnerable URL: http://colin.se/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= derp Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1096694 Goog...

tomatesverdes.cl XSS vulnerability

Vulnerable URL: http://tomatesverdes.cl/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= derp Details: Description| Value ---|--- Patched:| Yes, at 26.09.2015 Latest check for patch:| 26.09.2015 01:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

WordPress Unite Gallery Lite Plugin 1.4.6 - Multiple Vulnerabilities

WordPress Unite Gallery Lite plugin version 1.4.6 suffers from cross site request forgery and remote SQL injection vulnerabilities. Title: Cross-Site Request Forgery & SQL Injection Vulnerabilities in Unite Gallery Lite Wordpress Plugin v1.4.6 Submitter: Nitin Venkatesh Product: Unite Gallery Lit...

Cross site scripting

Cross-site scripting XSS vulnerability in the saveorder function in class-floating-social-bar.php in the Floating Social Bar plugin before 1.1.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the items parameter in an fsbsaveorder action to wp-admin/admin-ajax.ph...

CVE-2015-5528: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the saveorder function in class-floating-social-bar.php in the Floating Social Bar plugin before 1.1.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the items parameter in an fsbsaveorder action to wp-admin/admin-ajax.ph...

Sql injection

Multiple SQL injection vulnerabilities in includes/Function.php in the Easy2Map plugin before 1.2.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the mapName parameter in an e2mimgsavemapname action to wp-admin/admin-ajax.php and other unspecified vectors...

CVE-2015-4614

Multiple SQL injection vulnerabilities in includes/Function.php in the Easy2Map plugin before 1.2.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the mapName parameter in an e2mimgsavemapname action to wp-admin/admin-ajax.php and other unspecified vectors...

WeBid 'ajax.php' Arbitrary File Upload Vulnerability

WeBid is an open source auction site building solutions. An arbitrary file upload vulnerability exists in WeBid that stems from the program failing to adequately filter user-submitted input. An attacker can exploit this vulnerability to upload arbitrary files to an affected computer and execute...