ba-devlab.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1173542 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Malicious Package

Overview ba-upload is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using ba-upload...

SQL Injection Vulnerability in ba***.php File of Kindergarten Online Management System

Xianqi Kindergarten Online Management System is a kindergarten online management system that supports real-time synchronization of data between smartphone APP and computer. A SQL injection vulnerability exists in the ba.php file of the kindergarten online management system. An attacker can exploi...

SQL Injection Vulnerability in Wheaton eDigiton ba***.php Page

Wheaton eDigital is a VPN security gateway from Shenzhen Wheaton Information Technology Co. A SQL injection vulnerability exists in the Wheaton eDiTongue ba.php page, which can be exploited by attackers to obtain sensitive information...

Arbitrary file download vulnerability in the ba***.cl***.php file of the Seven Little Bears repository system

Seven bears library system a similar Baidu library online document preview, selling system. A vulnerability exists in the ba.cl.php file of the Seven Little Bears library system, which can be exploited by an attacker to obtain sensitive information. An attacker can exploit the vulnerability to...

SQL injection vulnerability in MetInfo CMS version 6.1.3 ba***.php page

MetInfo CMS 6.1.3 is an enterprise website management system with PHP Mysql architecture. A SQL injection vulnerability exists in the ba.php page of MetInfo CMS version 6.1.3, which can be exploited by attackers to obtain sensitive information from the database...

ba-sh.com XSS vulnerability

Open Bug Bounty ID: OBB-692904 Description| Value ---|--- Affected Website:| ba-sh.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

hotelpousadachale.com.br XSS vulnerability

Open Bug Bounty ID: OBB-654979 Description| Value ---|--- Affected Website:| hotelpousadachale.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SemCMS php version of foreign trade website SEMCMS_Ba****.php page has SQL injection vulnerability

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox , google, 360 and other mainstream browsers.SemCms php version written in php language, combined with apache, in window, or linux system to run...

ba-bamail.com XSS vulnerability

Open Bug Bounty ID: OBB-635288 Description| Value ---|--- Affected Website:| ba-bamail.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

www1.saude.ba.gov.br XSS vulnerability

Open Bug Bounty ID: OBB-633938 Description| Value ---|--- Affected Website:| www1.saude.ba.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sistemas.sefaz.pmlf.ba.gov.br XSS vulnerability

Open Bug Bounty ID: OBB-632766 Description| Value ---|--- Affected Website:| sistemas.sefaz.pmlf.ba.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SCADAS "BAS920 & ISC2000" Credentials Exposed(CVE-2017-17974)

Exploit; SCADAS "BAS920 & ISC2000"; Credentials Exposed BA System “Improper Access Control Authorization” Exploit Title: "SCADAS "BAS920 & ISC2000"; Credentials Exposed” CVE: CVE-2017-17974 Date: 29/12/2017 Exploit Author: Fernandez Ezequiel @capitanalfa && Bertin Jose @bertinjoseb Vendor: BA...

fondacija787.ba XSS vulnerability

Open Bug Bounty ID: OBB-612164 Description| Value ---|--- Affected Website:| fondacija787.ba Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ba-click.com XSS vulnerability

Open Bug Bounty ID: OBB-575415 Description| Value ---|--- Affected Website:| ba-click.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ba-ton.com XSS vulnerability

Open Bug Bounty ID: OBB-489998 Description| Value ---|--- Affected Website:| ba-ton.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on...

ba-sh.com XSS vulnerability

Open Bug Bounty ID: OBB-485065 Description| Value ---|--- Affected Website:| ba-sh.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-17974

BA SYSTEMS BAS Web on BAS920 devices with Firmware 01.01.00, HTTPserv 00002, and Script 02. and ISC2000 devices allows remote attackers to obtain sensitive information via a request for isc/getsidjs.aspx or isc/getsid.aspx, as demonstrated by obtaining administrative access by subsequently using...

Design/Logic Flaw

BA SYSTEMS BAS Web on BAS920 devices with Firmware 01.01.00, HTTPserv 00002, and Script 02. and ISC2000 devices allows remote attackers to obtain sensitive information via a request for isc/getsidjs.aspx or isc/getsid.aspx, as demonstrated by obtaining administrative access by subsequently using...

CVE-2017-17974

CVE-2017-17974 affects BA SYSTEMS BAS Web on BAS920 devices (firmware 01.01.00*, HTTPserv 00002, Script 02.*) and ISC2000 devices. The issue arises from an information-disclosure/authorization flaw exposed by requests to isc/get_sid_js.aspx or isc/get_sid.aspx, enabling an attacker to obtain cred...