7406 matches found
swfl360.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1217518 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
in360.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1217516 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
how01.com Cross Site Scripting vulnerability OBB-1217233
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
We-COM Municipality portal CMS SQL Injection Vulnerability
We-COM Municipality portal CMS is a Content Management System CMS from the Italian company We-COM. A SQL injection vulnerability exists in We-COM Municipality portal CMS version 2.1.x. The vulnerability stems from a lack of validation of externally-entered SQL statements in a database-based...
CVE-2020-15539
SQL injection can occur in We-com Municipality portal CMS 2.1.x via the cerca/ keywords field...
CVE-2020-15538
XSS can occur in We-com Municipality portal CMS 2.1.x via the cerca/ search bar...
CVE-2020-15539
SQL injection can occur in We-com Municipality portal CMS 2.1.x via the cerca/ keywords field...
CVE-2020-15540
We-com OpenData CMS 2.0 allows SQL Injection via the username field on the administrator login page...
CVE-2020-15538
XSS can occur in We-com Municipality portal CMS 2.1.x via the cerca/ search bar...
Cross site scripting
XSS can occur in We-com Municipality portal CMS 2.1.x via the cerca/ search bar...
Sql injection
SQL injection can occur in We-com Municipality portal CMS 2.1.x via the cerca/ keywords field...
Sql injection
We-com OpenData CMS 2.0 allows SQL Injection via the username field on the administrator login page...
CVE-2020-15538
The CVE-2020-15538 entry concerns the We-COM Municipality portal CMS, version 2.1.x. Concrete details in connected documents indicate a cross-site scripting vulnerability arising from insufficient validation of client-side data in the web application, exploitable via the cerca/ search bar. Impact...
CVE-2020-15538
XSS can occur in We-com Municipality portal CMS 2.1.x via the cerca/ search bar...
CVE-2020-15539
SQL injection can occur in We-com Municipality portal CMS 2.1.x via the cerca/ keywords field...
CVE-2020-15539
CVE-2020-15539 affects We-COM Municipality portal CMS 2.1.x. Multiple connected sources confirm an SQL injection vulnerability exploitable via the cerca/ keywords field, caused by insufficient input validation and unsafe SQL construction. Public references note that exploitation could allow remot...
CVE-2020-15540
CVE-2020-15540 affects We-COM OpenData CMS 2.0 and is caused by a lack of validation of externally entered SQL statements in the database backend, enabling SQL injection via the administrator username field. Reported technical details in connected sources confirm the vulnerability enables arbitra...
aas916.com Cross Site Scripting vulnerability OBB-1216882
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
bysf9.com Cross Site Scripting vulnerability OBB-1216547
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
ms7000.com Cross Site Scripting vulnerability OBB-1216512
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...