Skaut bazar < 1.3.3 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $SERVER'PHPSELF' in the /skaut-bazar.php file which allows attackers to inject arbitrary web scripts PoC https://example.com/wp-admin/options-general.php/"/?page=skatubazaroption...

TrickBot Continues Resurgence with Port-Scanning Module

The TrickBot trojan is continuing its bounce-back from an autumn takedown, recently adding a network-scanning module that uses the Masscan open-source tool to look for open ports. Masscan is a mass TCP/IP port scanner, which can scan the entire internet in under five minutes according to its...

CVE-2018-13045

SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to execute arbitrary SQL commands via the "id" parameter...

Sql injection

SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to execute arbitrary SQL commands via the "id" parameter...

CVE-2018-13045

Yeswiki Cercopitheque 2018-06-19-1 (Yeswiki Cercopitheque) contains a SQL injection on the Bazar page that can be exploited via the id parameter to execute arbitrary SQL commands. The vulnerability is triggered in PHP-based Yeswiki Cercopitheque and is documented with public exploit references (E...

PT-2019-8921

Name of the Vulnerable Software and Affected Versions Yeswiki Cercopitheque versions 2018-06-19-1 and earlier Description The issue allows attackers to execute arbitrary SQL commands via the id parameter in the "Bazar" page. This enables unauthorized access and manipulation of database content...

CVE-2018-13045: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to execute arbitrary SQL commands via the "id" parameter...

Yeswiki Cercopitheque SQL Injection Vulnerability

Yeswiki Cercopitheque is a Wiki system written in PHP. The system is mainly used to create and manage websites in a collaborative way. A SQL injection vulnerability exists in the 'Bazar' page in Yeswiki Cercopitheque 2018-06-19-1 and earlier versions. A remote attacker can exploit the vulnerabili...

vitezna.cz XSS vulnerability

Open Bug Bounty ID: OBB-577270 Description| Value ---|--- Affected Website:| vitezna.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

download-bazar.ir XSS vulnerability

Open Bug Bounty ID: OBB-448601 Description| Value ---|--- Affected Website:| download-bazar.ir Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

bazar-onlain.ru Open Redirect vulnerability

Vulnerable URL: http://bazar-onlain.ru/redirect?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

bazar.bg XSS vulnerability

Open Bug Bounty ID: OBB-103964 Description| Value ---|--- Affected Website:| bazar.bg Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...