4 matches found
vedpuran.com XSS vulnerability
Open Bug Bounty ID: OBB-550145 Description| Value ---|--- Affected Website:| vedpuran.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Campus Bulletin Board 3.4 - post3/Book.asp review Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/29375/info Campus Bulletin Board is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied dat...
CVE-2008-2492: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Campus Bulletin Board 3.4 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to post3/view.asp and the 2 review parameter to post3/book.asp...
CVE-2008-2493: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in post3/Book.asp in Campus Bulletin Board 3.4 allows remote attackers to inject arbitrary web script or HTML via the review parameter...