genistar.net XSS vulnerability

Open Bug Bounty ID: OBB-569046 Description| Value ---|--- Affected Website:| genistar.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Input validation

andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflected XSS in index.php because of missing validation of the action parameter in application/classes/application.php...

CVE-2017-6511

andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflected XSS in index.php because of missing validation of the action parameter in application/classes/application.php...

CVE-2017-6511

andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflected XSS in index.php because of missing validation of the action parameter in application/classes/application.php...

CVE-2017-6511: Improper Neutralization of Input During Web Page Generation

andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflected XSS in index.php because of missing validation of the action parameter in application/classes/application.php...

Build it Fast (bif3) 0.4.1 - Multiple Remote File Inclusion Vulnerabilities

No description provided by source. bif3-0.4.1 = Remote File Include Vulnerablitiy D.Script: http://bif.lunix.com.ar/tgz/bif3-0.4.1.tgz Discovered by: Alkomandoz Hacker Homepage: asb-may.net & mohandko.com & sniper-sa.com ====================================...

CVE-2011-2710: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via 1 the URI to includes/application.php, reachable through index.php; and, when Internet Explorer or Konqueror is used, 2 allow remote attackers to inject...

PT-2011-4037

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 1.7.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved through the URI to "includes/application.php", reachable through "index.php". Additionally, when using...

Joomla! 1.7.0-RC and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities

No description provided by source. component: comsearch, parameter: searchword Browser: IE, Konqueror ===================================================================== N.B. Our previous reported issue 1.6.3 of "searchword" parameter XSS was not fixed completely. REQUEST POST...

Build It Fast远程文件包含漏洞

Build It Fast是一款基于PHP的WEB应用程序。 Build It Fast不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'sysdir'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Build it Fast 0.4.1 目前没有解决方案提供： http://bif.lunix.com.ar/ http://www.example.com/Base/Application.php?peardir=Shell...

CVE-2007-2762

Multiple PHP remote file inclusion vulnerabilities in Build it Fast bif3 0.4.1 allow remote attackers to execute arbitrary PHP code via a URL in 1 the peardir parameter to Base/Application.php, or the 2 sysdir parameter to a Footer.php, b widget.BifContainer.php, c widget.BifRoot.php, d...

CVE-2007-2762: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Build it Fast bif3 0.4.1 allow remote attackers to execute arbitrary PHP code via a URL in 1 the peardir parameter to Base/Application.php, or the 2 sysdir parameter to a Footer.php, b widget.BifContainer.php, c widget.BifRoot.php, d...

CVE-2006-0688

PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter...

CVE-2006-0688: Undefined Security Weakness

PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter...

CVE-2004-2443

Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash of a null password, which is compared against the logged session variable by the loggedon function in application.php...

CVE-2004-2443: Undefined Security Weakness

Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash of a null password, which is compared against the logged session variable by the loggedon function in application.php...