Cross-site Scripting (XSS)

weison-tech/yii2-rbac is vulnerable to cross-site scripting XSS. The attack is possible because it does not sanitize a name filed to /contact.html via protected\core\modules\home\models\Contact.php , allowing an attacker to inject arbitrary script through it...

CVE-2019-16130

YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html...

Design/Logic Flaw

YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html...

CVE-2019-16130

YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html...

CVE-2019-16130

YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html...

PT-2019-14529

Name of the Vulnerable Software and Affected Versions YII2-CMS version 1.0 Description The issue concerns a Cross-Site Scripting XSS problem. It is located in the protectedcoremoduleshomemodelsContact.php file, specifically via the name field. This field is vulnerable when accessed through the...

barbaranettelbeck.com XSS vulnerability

Open Bug Bounty ID: OBB-642193 Description| Value ---|--- Affected Website:| barbaranettelbeck.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

calendario-365.com.br XSS vulnerability

Open Bug Bounty ID: OBB-620329 Description| Value ---|--- Affected Website:| calendario-365.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

deurenservicecentrum.nl XSS vulnerability

Vulnerable URL: https://www.deurenservicecentrum.nl/contact.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4809035 Google Pagerank| 0 VIP website status:| No Check...

dsi-corp.com XSS vulnerability

Vulnerable URL: http://www.dsi-corp.com/contact.html%E2%80%8E? Details: Description| Value ---|--- Patched:| Yes, at 11.10.2015 Latest check for patch:| 11.10.2015 13:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 997120 Google Pagerank| 3 VIP website status...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Bractus SunTrack allow remote attackers to inject arbitrary web script or HTML via the 1 title parameter to newprofile.html; the 2 firstname, 3 lastname, and 4 company parameters to signup/signup.html; and the 5 firstname, 6 lastname, and 7...

CVE-2009-3950: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Bractus SunTrack allow remote attackers to inject arbitrary web script or HTML via the 1 title parameter to newprofile.html; the 2 firstname, 3 lastname, and 4 company parameters to signup/signup.html; and the 5 firstname, 6 lastname, and 7...