14 matches found
aktion-mensch.de Cross Site Scripting vulnerability OBB-3891079
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
aktion-kindertraum.de Cross Site Scripting vulnerability OBB-3860841
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
aktion-blau-plus.rlp-umwelt.de Cross Site Scripting vulnerability OBB-3773744
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
aktion-personal.de Improper Access Control vulnerability OBB-2225141
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
aktion-tu-was.de XSS vulnerability
Open Bug Bounty ID: OBB-702931 Description| Value ---|--- Affected Website:| aktion-tu-was.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
aktion-freiheitstattangst.org XSS vulnerability
Open Bug Bounty ID: OBB-665766 Description| Value ---|--- Affected Website:| aktion-freiheitstattangst.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
aktion-mensch.de XSS vulnerability
Open Bug Bounty ID: OBB-665715 Description| Value ---|--- Affected Website:| aktion-mensch.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
aktion-mensch.de XSS vulnerability
Open Bug Bounty ID: OBB-488704 Description| Value ---|--- Affected Website:| aktion-mensch.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...
Aktion Mensch-App - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Aktion Mensch-App published at the 'play' market has multiple vulnerabilities...
aktion-deutschland-hilft.de XSS vulnerability
Vulnerable URL: http://www.aktion-deutschland-hilft.de/de/suche/?googlesword=%22%3E%3Csvg%20onload%3Dalert%28%27XSSPOSED%27%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.08.2015 Latest check for patch:| 24.08.2015 13:59 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
PT-2012-5288
Name of the Vulnerable Software and Affected Versions myCare2x affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters in different PHP files, including aktion or callurl in...
Unfixed XSS vulnerability at presse.aktion-mensch.de
Security researcher Darkster, has submitted on 23/07/2007 a cross-site-scripting XSS vulnerability affecting presse.aktion-mensch.de, which at the time of submission ranked 228505 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It i...
Sql injection
SQL injection vulnerability in index.php in HC NEWSSYSTEM 1.0-4 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a komm aktion...
CVE-2007-1417: Undefined Security Weakness
SQL injection vulnerability in index.php in HC NEWSSYSTEM 1.0-4 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a komm aktion...