33 matches found
royalsharmproperty.com XSS vulnerability
Open Bug Bounty ID: OBB-580440 Description| Value ---|--- Affected Website:| royalsharmproperty.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
kolesamira.kiev.ua XSS vulnerability
Open Bug Bounty ID: OBB-563403 Description| Value ---|--- Affected Website:| kolesamira.kiev.ua Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
1001concours.fr XSS vulnerability
Open Bug Bounty ID: OBB-447073 Description| Value ---|--- Affected Website:| 1001concours.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
shiaindia.com XSS vulnerability
Vulnerable URL: http://shiaindia.com/component/finder/search.html?q=nomanAli181%22%20onmouseover=%22alert1 Details: Description| Value ---|--- Patched:| Yes, at 06.10.2017 Latest check for patch:| 06.10.2017 05:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
lindasdekorogdesign.no XSS vulnerability
Open Bug Bounty ID: OBB-212186 Description| Value ---|--- Affected Website:| lindasdekorogdesign.no Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Lunar CMS 3.3 - CSRF And Stored XSS Vulnerability
No description provided by source. ?!-- Lunar CMS 3.3 CSRF And Stored XSS Vulnerability Vendor: Lunar CMS Product web page: http://www.lunarcms.com Affected version: 3.3 Summary: Lunar CMS is a freely distributable open sourcecontent management system written for use on servers running the ever s...
CmsEasy_5.5_UTF-8_20140420 存在存储型xss 可打管理员和平行用户
简要描述： CmsEasy5.5UTF-820140420 存在存储型xss 可打管理员和平行用户 详细说明： 第一种情况（攻击管理员）: 注册用户后，然后访问/CmsEasy5.5UTF-820140420/uploads/bbs/add-archive.php?cid=1 进行发帖，其中主题填写： " oninput=alert1 然后登陆管理员，如图所示: 点击"操作"底下的编辑，然后，让管理员发现问题的时候，对其内容进行删除修改时候，抽发xss 如图所示： 第二种情况（攻击平行用户）:...
WordPress WP Realty Cross Site Scripting
\ \ / / / | / | \ V / | | alert1; ------------------------------------------------ Demo: http://realty.drillionnet.com//wp-content/plugins/wp-realty/indexext.php?action=contactfriend&popup=yes&listingid= "/alert1;...
Shopex反射型XSS
简要描述： Shopex 4.8.5.81518 反射型XSS 详细说明： http://site/shopex-single-4.8.5.81518/index.php?product-"...
Reflected XSS in 'where' param of doSearchSite
Olivier Beg reported quote noformathttps://confluence.atlassian.com/dosearchsite.action?queryString=%22%3E&startIndex=0&lastModified=LASTWEEK&where=confall%22%3E%3Cimg%20src=x%20onerror=alert1%3Enoformat I asume he is DOM based because he works in google chrome. quote This results in code:html co...
Reflected XSS in 'where' param of doSearchSite
Olivier Beg reported quote noformathttps://confluence.atlassian.com/dosearchsite.action?queryString=%22%3E&startIndex=0&lastModified=LASTWEEK&where=confall%22%3E%3Cimg%20src=x%20onerror=alert1%3Enoformat I asume he is DOM based because he works in google chrome. quote This results in code:html co...
WebEmlak Real Estate Cross Site Scripting
Exploit Title: WebEmlak Real Estate Script Stored XSS Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Cross Site Scripting can be done using the URL input Vulnerable Page: index.php Example: index.php/ Exploit:...
