baseball-reference.com XSS vulnerability

Vulnerable URL: http://www.baseball-reference.com/players/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8630 Google Pagerank| 6 VIP website status:| Yes Check...

lewisborobaseball.org Open Redirect vulnerability

Vulnerable URL: http://lewisborobaseball.org/Goto.asp?URL=https://www.xssposed.org/=2708 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 21113325 Google Pagerank| 1 VIP...

baseball-almanac.com XSS vulnerability

Open Bug Bounty ID: OBB-95326 Description| Value ---|--- Affected Website:| baseball-almanac.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

Design/Logic Flaw

The BASEBALL MANAGER K aka com.cjenm.yagamkgoogle application 1.13 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7719

The vulnerability CVE-2014-7719 affects the Android application BASEBALL MANAGER K (package com.cjenm.yagamkgoogle) version 1.13. The issue is that the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and read sensitive information via...

CVE-2014-7719

The BASEBALL MANAGER K aka com.cjenm.yagamkgoogle application 1.13 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5597

CVE-2014-5597 affects the Android game “The 9 Innings: 2014 Pro Baseball” (package com.com2us.nipb2013.normal.freefull.google.global.android.common), version 4.0.3. Root cause: the app does not verify X.509 certificates when connecting to SSL servers, enabling potential MITM attackers to spoof th...

CVE-2014-5597

The 9 Innings: 2014 Pro Baseball aka com.com2us.nipb2013.normal.freefull.google.global.android.common application 4.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

Yahoo!: CSRF Token missing on http://baseball.fantasysports.yahoo.com/b1/127146/messages

Thank you for your submission to the Yahoo Bug Bounty program. We were able to reproduce the issue you reported and have implemented appropriate fixes. We appreciate your adherence to responsible disclosure guidelines and look forward to your future participation in the program...

Lovely tokens and the September 2013 security updates

Helen Hunt Jackson famously wrote, “By all lovely tokens September is here, with summer’s best of weather and autumn’s best of cheer.” I share Helen’s clear adoration for this time of year. As a sports fan, there are so many “lovely tokens” to enjoy. The baseball pennant race is heating up, colle...

Website of the Baseball Writers' Association of America hacked !

The website of the Baseball Writers' Association of America was hacked Wednesday morning, mere hours before results of the Hall of Fame voting was announced. For about two hours, visitors to BBWAA.com were greeted by a message from the "Gaza Hacker Team." Hall of Fame voting results remained...

CVE-2010-3027

SQL injection vulnerability in index.php in Tycoon Baseball Script 1.0.9 allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a gameplayer action...

CVE-2010-3027

An SQL injection in Tycoon Baseball Script 1.0.9 (index.php) allows remote execution via the game_id parameter in a game_player action. This is reported across multiple sources (NVD, Red Hat, CVE List, PRION) with base CVSS2 score 7.5 (HIGH). The connected documents do not provide a patch or work...

CVE-2010-3027

SQL injection vulnerability in index.php in Tycoon Baseball Script 1.0.9 allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a gameplayer action...

Unfixed XSS vulnerability at www.baseball-reference.com

Security researcher AltF4, has submitted on 21/06/2010 a cross-site-scripting XSS vulnerability affecting www.baseball-reference.com, which at the time of submission ranked 5995 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is...

CVE-2008-5851

SQL injection vulnerability in index.php in My PHP Baseball Stats MyPBS allows remote attackers to execute arbitrary SQL commands via the seasonID parameter...

Sql injection

SQL injection vulnerability in index.php in My PHP Baseball Stats MyPBS allows remote attackers to execute arbitrary SQL commands via the seasonID parameter...

CVE-2008-5851

CVE-2008-5851 describes an SQL injection in the MyPHP Baseball Stats (MyPBS) application. The vulnerability is in index.php via the seasonID parameter, allowing remote attackers to alter the backend database by issuing arbitrary SQL. The NVD data lists a base score of 7.5 (HIGH) with NETWORK atta...

CVE-2008-5851

SQL injection vulnerability in index.php in My PHP Baseball Stats MyPBS allows remote attackers to execute arbitrary SQL commands via the seasonID parameter...

Unfixed XSS vulnerability at www.baseballprospectus.com

Security researcher C1c4Tr1Z, has submitted on 15/05/2008 a cross-site-scripting XSS vulnerability affecting www.baseballprospectus.com, which at the time of submission ranked 40624 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/05/2008. It...