267 matches found
CVE-2023-1030
SourceCodester code-projects Online Boat Reservation System 1.0 is affected by CVE-2023-1030 due to a flaw in the POST Parameter Handler: the un parameter to /boat/login.php can be manipulated to trigger cross-site scripting. The vulnerability is exploitable remotely, and public exploits or detai...
Online Boat Reservation System 代码注入漏洞
Online Boat Reservation System is an online boat reservation system. A code injection vulnerability exists in version 1.0 of the Online Boat Reservation System, which stems from incorrect manipulation of the parameter un that can lead to cross-site scripting...
PT-2023-16702 · Sourcecodester · Sourcecodester Online Hotel Reservation System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Boat Reservation System version 1.0 Description: A vulnerability has been found in the file /boat/login.php of the component POST Parameter Handler. The manipulation of the argument un leads to cross site scripting. The...
Friday Squid Blogging: Grounded Fishing Boat Carrying 16,000 Pounds of Squid
Rough seas are hampering efforts to salvage the boat: The Speranza Marie, carrying 16,000 pounds of squid and some 1,000 gallons of diesel fuel, hit the shoreline near Chinese Harbor at about 2 a.m. on Dec. 15. Six crew members were on board, and all were rescued without injury by another fishing...
charlesriverboat.com Cross Site Scripting vulnerability OBB-2779177
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Arbitrary File Download Vulnerability in HeartStone OA 2022 Early Summer Dragon Boat Festival Edition
Mindtone OA is an office software equipped with AI artificial intelligence. An arbitrary file download vulnerability exists in Heartland OA 2022 Early Summer Dragon Boat Festival Edition, which can be exploited by attackers to obtain sensitive information...
naplesboatmart.com Cross Site Scripting vulnerability OBB-2533917
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
melbourneboatsales.com.au Cross Site Scripting vulnerability OBB-2253326
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
hawkinsboatbrokerage.com Cross Site Scripting vulnerability OBB-1443224
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
boatbillofsaleforms.com Cross Site Scripting vulnerability OBB-1402179
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
boat-renting-nicols.co.uk Cross Site Scripting vulnerability OBB-1367913
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
miami-rent-boat.com Cross Site Scripting vulnerability OBB-1255821
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2014-4968
The WebView class and use of the WebView.addJavascriptInterface method in the Boat Browser application 8.0 and 8.0.1 for Android allow remote attackers to execute arbitrary code via a crafted web site, a related issue to CVE-2012-6636...
Design/Logic Flaw
The WebView class and use of the WebView.addJavascriptInterface method in the Boat Browser application 8.0 and 8.0.1 for Android allow remote attackers to execute arbitrary code via a crafted web site, a related issue to CVE-2012-6636...
CVE-2014-4968
The WebView class and use of the WebView.addJavascriptInterface method in the Boat Browser application 8.0 and 8.0.1 for Android allow remote attackers to execute arbitrary code via a crafted web site, a related issue to CVE-2012-6636...
CVE-2014-4968
The CVE-2014-4968 entry corresponds to a vulnerability in Boat Browser for Android (versions 8.0 and 8.0.1) where the WebView.addJavascriptInterface usage in the app’s WebView allows remote code execution via a crafted web site. This is related to CVE-2012-6636. Exploit details are publicly docum...
boat-houses.focus.tv Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1030251 Security Researcher devl00p Helped patch 3018 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting boat-houses.focus.tv...
boat-house.focus.tv Cross Site Scripting vulnerability
Security Researcher devl00p Helped patch 2581 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting boat-house.focus.tv website and its users. Following...
3dboatdesign.com XSS vulnerability
Open Bug Bounty ID: OBB-689203 Description| Value ---|--- Affected Website:| 3dboatdesign.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
