compraeixample.cat XSS vulnerability

Open Bug Bounty ID: OBB-569865 Description| Value ---|--- Affected Website:| compraeixample.cat Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

CVE-2018-6585

SQL Injection exists in the JTicketing 2.0.16 component for Joomla! via a view=events action with a filtercreator or filtereventscat parameter...

Command injection

Security Onion Solutions Squert version 1.0.1 through 1.6.7 contains a CWE-78: Improper Neutralization of Special Elements used in an OS Command OS Command Injection vulnerability in .inc/callback.php that can result in execution of OS Commands. This attack appear to be exploitable via Web reques...

Center for Internet Security CIS-CAT Pro Dashboard Privilege Gain Vulnerability

Center for Internet Security CIS-CAT Pro Dashboard is a set of panels used to display system compliance on a dashboard. An access control error vulnerability exists in versions of Center for Internet Security CIS-CAT Pro Dashboard prior to 1.0.4. An attacker can exploit this vulnerability to gain...

CVE-2017-8916

In Center for Internet Security CIS-CAT Pro Dashboard before 1.0.4, an authenticated user is able to change an administrative user's e-mail address and send a forgot password email to themselves, thereby gaining administrative access...

CVE-2017-8916

In CIS-CAT Pro Dashboard, prior to version 1.0.4, an authenticated user can change an administrator’s email address and trigger a password-recovery email to themselves, thereby gaining administrative access. This is described in CVE-2017-8916 and corroborated by CNVD/CNVD-2018-05227 and other sou...

Classified Ads CMS Quickad SQL Injection Vulnerability

Classified Ads CMS Quickad is a set of PHP based advertising website scripts. A SQL injection vulnerability exists in Classified Ads CMS Quickad version 4.0. A remote attacker can exploit this vulnerability by sending the 'keywords', 'placeid', 'cat', or 'subcat' parameters to the listing URI to...

Sql injection

SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI...

CVE-2018-5972

SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI...

Piwigo 2.9.1 - cat_true / cat_false SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Piwigo = 2.9.1 - 'cattrue'/'catfalse' SQL Injection Dork: N/A Date: 12.12.2017 Vendor Homepage: http://piwigo.org/ Software Link: http://piwigo.org/basics/downloads Version: = 2.9.1 Category: Webapps Tested on: WiN7x64/WIN10X64...

CVE-2017-17613

Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php prid parameter or the searchbycatlist.php catid parameter...

PHP CityPortal SQL Injection Vulnerability

PHP CityPortal is a corporate website building system developed by PhpCityPortal team in India. A SQL injection vulnerability exists in PHP CityPortal version 2.0. A remote attacker can exploit this vulnerability to inject SQL commands with the help of 'nid' or 'cat' parameter...

Sql injection

PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter...

CVE-2017-15970

PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter...

CVE-2017-15970

PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter...

brovary.info XSS vulnerability

Vulnerable URL: http://www.brovary.info/catalog/view.php?id=3758=2"'--!...

Piwigo SQL Injection Vulnerability

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time and more. A SQL injection vulnerability exists in the administrative backend of Piwigo 2.9.1 and previous versions. A remote attack...

slotaway.com XSS vulnerability

Vulnerable URL: https://www.slotaway.com/games/casino/slots/top-cat?siteId=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Maian Greetings 2.1 - cat SQL Injection

Maian Greetings 2.1 - cat SQL Injection Exploit Title: Maian Greetings v2.1 - SQL Injection Google Dork: N/A Date: 04.04.2017 Vendor Homepage: http://www.maiansoftware.com/ Software: http://www.maiangreetings.com/?dl=yes Demo: http://www.maiansoftware.com/demos/greetings/ Version: 2.1 Tested on:...

Joomloc-CAT, version 4.1.3, SQL injection

Joomloc-CAT, version 4.1.3, SQL injection Resolution: update to 4.2.1 Update Notice URL http://www.joomloc.fr.nf/en/downloads-products/file/joomloc-pro-channel-manager-pms.html...