PT-2017-10995

Name of the Vulnerable Software and Affected Versions DTracker version 1.5 Description The issue concerns a lack of authorization check in the DTracker plugin for WordPress. Specifically, the code in dtracker/save contact.php does not verify user authorization before adding new contacts to the wp...

Restaurant Website Script 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Restaurant Website Script 1.0 - SQL Injection Dork: N/A Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/small-business/restaurant-website-script Demo: http://restaurant.scriptzee.com/ Version: 1.0...

mkcustomupholstery.com XSS vulnerability

Vulnerable URL: http://mkcustomupholstery.com/contact.php?subject=" Details: Description| Value ---|--- Patched:| Yes, at 28.11.2017 Latest check for patch:| 28.11.2017 11:57 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

sccoos.org XSS vulnerability

Vulnerable URL: http://www.sccoos.org/data/harbors/lalb/contact.php?from=fullscreen%22%3E%3Ch1%3EM0ns7er%3C/h1%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E%3C/br%3E%3Cimg%20src=%22https://images.cooltext.com/4956678.gif%22%20width=%22166%22%20height=%2270%22%20alt=%22m0ns7er%22%20/%3E...

SQL Injection

dolibarr is susceptible to multiple SQL injection vulnerabilities. The vulnerabilities exist because it does not filter the user-supplied data before using it in an SQL query, allowing the attackers to inject malicious SQL through the 1 contactid parameter in an addcontact action, 2 ligne paramet...

easyguestmanagement.at XSS vulnerability

Vulnerable URL: http://easyguestmanagement.at/web/contact.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 541323 VIP website status:| No Check easyguestmanagement.at SSL...

monnet-avocat.com XSS vulnerability

Vulnerable URL: http://www.monnet-avocat.com/contact.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check monnet-avocat.com SSL...

wellydiecast.com XSS vulnerability

Vulnerable URL: http://www.wellydiecast.com/contact.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 705561 VIP website status:| No Check wellydiecast.com SSL connection:| Grade:...

hermanbroeren.nl XSS vulnerability

Vulnerable URL: http://www.hermanbroeren.nl/ajxcontact/contact.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16559636 VIP website status:| No Check hermanbroeren.nl SSL...

pdhilversum.nl XSS vulnerability

Vulnerable URL: https://pdhilversum.nl/contact.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check pdhilversum.nl SSL...

Cross site scripting

Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via contact.php...

CVE-2017-2124

Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via contact.php...

CVE-2017-2124: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via contact.php...

PT-2017-15190

Name of the Vulnerable Software and Affected Versions OneThird CMS versions 1.73 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the "contact.php" page. Recommendations For OneThird CMS versions 1.73 and earlier, update to a...

abrasifs-friess.com XSS vulnerability

Vulnerable URL: http://www.abrasifs-friess.com/contact.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3821545 VIP website status:| No Check abrasifs-friess.com SSL connection:|...

haber3.com XSS vulnerability

Vulnerable URL: http://www.haber3.com/contact.php Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5367 VIP website status:| Yes Check haber3.com SSL...

guidamansarda.it XSS vulnerability

Vulnerable URL: https://www.guidamansarda.it/api/contact.php?callback=prompt/OPENBUGBOUNTY/...

webuildplay.com XSS vulnerability

Vulnerable URL: http://www.webuildplay.com/contact.php?callback=prompt/OPENBUGBOUNTY/...

otzyv.ru XSS vulnerability

Vulnerable URL: http://www.otzyv.ru/contact.php Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:10 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13996 VIP website status:| Yes Check otzyv.ru SSL...

pubdirecte.com XSS vulnerability

Vulnerable URL: http://www.pubdirecte.com/contact.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 22123 VIP website status:| Yes Check pubdirecte.com SSL connection:| Grade: A...