104 matches found
CVE-2022-42458
Authentication bypass using an alternate path or channel vulnerability in bingo!CMS version1.7.4.1 and earlier allows a remote unauthenticated attacker to upload an arbitrary file. As a result, an arbitrary script may be executed and/or a file may be altered. Recent assessments: Assessed Attacker...
PT-2022-26441 · Bingo!Cms · Bingo!Cms
Name of the Vulnerable Software and Affected Versions: bingo!CMS versions 1.7.4.1 and earlier Description: The issue allows a remote unauthenticated attacker to upload an arbitrary file, potentially leading to the execution of an arbitrary script or alteration of a file. This is due to an...
CVE-2022-42458
Authentication bypass using an alternate path or channel vulnerability in bingo!CMS version1.7.4.1 and earlier allows a remote unauthenticated attacker to upload an arbitrary file. As a result, an arbitrary script may be executed and/or a file may be altered...
bingo!CMS vulnerable to authentication bypass
Overview bingo!CMS provided by Shift Tech Inc. contains an authentication bypass vulnerability CWE-288 in some of the management functions. Shift Tech Inc. states that attacks exploiting this vulnerability have been observed. Shift Tech Inc. reported this vulnerability to IPA to notify users of i...
VulnCheck KEV: CVE-2022-42458
Authentication bypass using an alternate path or channel vulnerability in bingo!CMS version1.7.4.1 and earlier allows a remote unauthenticated attacker to upload an arbitrary file. As a result, an arbitrary script may be executed and/or a file may be altered...
JVN#74592196: bingo!CMS vulnerable to authentication bypass
bingo!CMS provided by Shift Tech Inc. contains an authentication bypass vulnerability CWE-288 in some of the management functions. Shift Tech Inc. states that attacks exploiting this vulnerability have been observed. Impact Accessing a specific URL directly may allow a remote unauthenticated...
joker123.bingo Cross Site Scripting vulnerability OBB-2769145
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
musicbingo.vip Cross Site Scripting vulnerability OBB-2383990
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
bingo-ireland.com XSS vulnerability
Vulnerable URL: https://www.bingo-ireland.com/%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 01.05.2017 Latest check for patch:| 01.05.2017 12:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16635048 V...
butterflybingo.com XSS vulnerability
Vulnerable URL: https://www.butterflybingo.com/%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6335720 VIP website status:| No Che...
affiliates.unitedbingo.co.uk Open Redirect vulnerability
Vulnerable URL: http://affiliates.unitedbingo.co.uk/processing/clickthrgh.asp?btag=a4401b1743==https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Ran...
Bingo for Kids - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Bingo for Kids published at the 'play' market has multiple vulnerabilities...
AE Bingo: offline Bingo Games - Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application AE Bingo: offline Bingo Games published at the 'play' market has multiple vulnerabilities...
Bingo Vingo -FREE Bingo Casino - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Bingo Vingo -FREE Bingo Casino published at the 'play' market has multiple vulnerabilities...
Bingo World - FREE Game - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities
HackApp vulnerability scanner discovered that application Bingo World - FREE Game published at the 'play' market has multiple vulnerabilities...
Bingo - Tambola | Twin Games - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Bingo - Tambola | Twin Games published at the 'play' market has multiple vulnerabilities...
Trophy Bingo – Free Bingo Game - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Trophy Bingo – Free Bingo Game published at the 'play' market has multiple vulnerabilities...
Bingo Fever-Valentine's Day - AWS Credentials, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Bingo Fever-Valentine's Day published at the 'play' market has multiple vulnerabilities...
Best Bingo - LGPL license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Best Bingo published at the 'play' market has multiple vulnerabilities...
Slingo Shuffle - Bingo & Slots - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Slingo Shuffle - Bingo & Slots published at the 'play' market has multiple vulnerabilities...