112 matches found
Leading the Way in Tampa
If you've been to the Tampa Bay area in recent years, you've probably noticed the significant tech industry expansion taking place in the Channel District. It's an exciting time to be a part of the scene, and Rapid7 is smack in the middle. Being active in the Tampa Bay Chamber of Commerce is...
colombiachamber.com Cross Site Scripting vulnerability OBB-2780657
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
sydneychamberopera.com Cross Site Scripting vulnerability OBB-2680433
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
pikecountychamber.chambermaster.com Cross Site Scripting vulnerability OBB-1403548
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
WordPress Chamber Dashboard Business Directory plugin <= 3.3.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability found by Mihkel Raba in WordPress Chamber Dashboard Business Directory plugin versions = 3.3.0. Solution Update the WordPress Chamber Dashboard Business Directory plugin to the latest available version at least 3.3.1...
CVE-2020-24699
The Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS...
CVE-2020-24699
The Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS...
Cross site scripting
The Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS...
CVE-2020-24699
The Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS...
CVE-2020-24699
CVE-2020-24699 concerns the Chamber Dashboard Business Directory WordPress plugin (version 3.2.8). Multiple connected sources confirm an authenticated stored Cross-Site Scripting (XSS) vulnerability arising from unsanitized input in the dashboard when creating or editing a business, exploitable b...
Chamber Dashboard Business Directory < 3.3.1 - Authenticated Stored Cross-Site Scripting
The plugin does not sanitise user input when creating or editing a business in the dashboard, allowing high privilege users Editor+ to set XSS payloads in various fields. PoC Login as an editor or admin, then add/edit a business and set the phone number as " The payload will then be executed in t...
business.fullertonchamber.com Cross Site Scripting vulnerability OBB-1231619
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
business.grantspasschamber.org Cross Site Scripting vulnerability OBB-1231548
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
bombaychamber.com Improper Access Control vulnerability OBB-1230547
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
business.arcatachamber.com Cross Site Scripting vulnerability OBB-1228351
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
business.alpharettachamber.com Cross Site Scripting vulnerability OBB-1228338
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
business.aberdeen-chamber.com Cross Site Scripting vulnerability OBB-1228323
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
alpinechamber.com Cross Site Scripting vulnerability OBB-1228249
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
charlestonchamber.org Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1175965 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Scanning for Flaws, Scoring for Security
Is it fair to judge an organization's information security posture simply by looking at its Internet-facing assets for weaknesses commonly sought after and exploited by attackers, such as outdated software or accidentally exposed data and devices? Fair or not, a number of nascent efforts are usin...