Reservo Image Hosting Script 1.5 - Cross-Site Scripting

Reservo Image Hosting Script 1.5 - Cross-Site Scripting Exploit Title: Reservo Image Hosting Script 1.5 - Cross Site Scripting Date: 15-01-2018 Exploit Author: Dennis Veninga Contact Author: d.veninga at networking4all.com Vendor Homepage: reservo.co Version: 1.6 CVE-ID: CVE-2018-5705 With suppor...

Reservo Image Hosting Script 1.5 - Cross-Site Scripting

Exploit Title: Reservo Image Hosting Script 1.5 - Cross Site Scripting Date: 15-01-2018 Exploit Author: Dennis Veninga Contact Author: d.veninga at networking4all.com Vendor Homepage: reservo.co Version: 1.6 CVE-ID: CVE-2018-5705 With support for automatic thumbnails & image resizing in over 200...

Ubiquiti Inc.: Reflected XSS

Due to the lack of sanitisation in the commend area, with a especially crafted message, is possible to execute a XSS with the "preview" function. If a draft is save, is possible to exploit this bug using as and stored-XSS. The "New Discussion" page on the Spanish and Portuguese forums have a...

assistive.flysas.com XSS vulnerability

Open Bug Bounty ID: OBB-481477 Description| Value ---|--- Affected Website:| assistive.flysas.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PHP Scripts Mall Car Rental Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Car Rental Script is an open source website script for cab booking owners and agents. A cross-site scripting vulnerability exists in PHP Scripts Mall Car Rental Script. The vulnerability can be exploited via the carid parameter in admin/areaedit.php or websitename parameter in...

CVE-2017-17907

PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter...

CVE-2017-17763

SuperBeam through 4.1.3, when using the LAN or WiFi Direct Share feature, does not use HTTPS or any integrity-protection mechanism for file transfer, which makes it easier for remote attackers to send crafted files, as demonstrated by APK injection...

lohmann-tapes.com XSS vulnerability

Open Bug Bounty ID: OBB-452090 Description| Value ---|--- Affected Website:| lohmann-tapes.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Google Android WLAN Qualcomm Component Elevation of Privilege Vulnerability

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android WLAN Qualcomm component. An attacker can exploit this vulnerability to achieve elevation of privilege...

area-lavoro.ch XSS vulnerability

Open Bug Bounty ID: OBB-440438 Description| Value ---|--- Affected Website:| area-lavoro.ch Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

WordPress WP Customer Area Plugin <= 7.4.2 - Reflected Cross Site Scripting vulnerability

The value of $REQUEST‘page’ parameter is not escaped in the template files - /src/php/core-addons/admin-area/templates/. This allows an attacker to execute a reflected cross site scripting attack. The vulnerability was fixed in version 7.4.3. Solution Update the plugin...

Customer Area < 7.4.3 - XSS

The WP Customer Area WordPress plugin was affected by a XSS security vulnerability...

I-O DATA DEVICE Denial of Service Vulnerability

The I-O DATA DEVICE LAN DISK Connect is a LAN disk link device from I-O DATA DEVICE Japan. A security vulnerability exists in I-O DATA DEVICE LAN DISK Connect version 2.02 and earlier. An attacker could exploit this vulnerability to cause a denial of service...

Cisco Wireless LAN Controller Simple Network Management Protocol Subsystem Denial of Service Vulnerability

Cisco Wireless LAN Controller WLC is a wireless LAN controller product from Cisco USA. The product provides security policy, intrusion detection and other functions in the wireless LAN.Simple Network Management Protocol SNMP is one of the simple network management subsystems used for network devi...

Cross site scripting

XSS exists in the E-Sic 1.0 /cadastro/index.php URI aka the requester's registration area via the nome parameter...

CVE-2017-15380

XSS exists in the E-Sic 1.0 /cadastro/index.php URI aka the requester's registration area via the nome parameter...

Sql injection

E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php aka the search private area...

CVE-2017-15373

E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php aka the search private area...

CVE-2017-15373

CVE-2017-15373 : E-Sic 1.0 contains a SQL injection in the query parameter “q” of esiclivre/restrito/inc/lkpcep.php (the search private area). The root cause is improper handling of input leading to arbitrary SQL execution. Impact is described as partial to high confidentiality, integrity, and av...

E-Sic Software livre CMS - q Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: E-Sic Software livre CMS - Blind SQL Injection Exploit Author: Guilherme Assmann Vendor Homepage: https://softwarepublico.gov.br/ Version: 1.0 Tested on: kali linux, windows 7, 8.1, 10 - Firefox Download...