Hospital Management System 跨站脚本漏洞

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. PHPGurukul Hospital Management System is vulnerable to cross-site scripting, which can be exploited by attackers to execute js code via contact.php...

Mara CMS 7.5 - Reflective Cross-Site Scripting

Exploit Title: Mara CMS 7.5 - Reflective Cross-Site Scripting Google Dork: NA Date: 2020-08-01 Exploit Author: George Tsimpidas Vendor Homepage: https://sourceforge.net/projects/maracms/ Software Link: https://sourceforge.net/projects/maracms/files/MaraCMS75.zip/download Version: 7.5 Tested on:...

CVE-2020-24223

Mara CMS 7.5 allows cross-site scripting XSS in contact.php via the theme or pagetheme parameters...

Cross site scripting

Mara CMS 7.5 allows cross-site scripting XSS in contact.php via the theme or pagetheme parameters...

CVE-2020-24223

Mara CMS 7.5 allows cross-site scripting XSS in contact.php via the theme or pagetheme parameters...

CVE-2020-24223

Mara CMS 7.5 is affected by a reflected XSS in contact.php via the theme or pagetheme parameters (root cause: improper sanitization of these inputs). The Nuclei template and multiple sources describe exploitation resulting in arbitrary JavaScript execution in the victim’s browser, with potential ...

Seabreeze Consulting Cross Site Scripting

Exploit Title: Seabreezeconsulting v1 XSS vulnerability Google Dork:"by Seabreeze Consulting" +inurl:/contact.php Date: 2020-04-03 Exploit Author: @ThelastVvV Vendor Homepage: www.seabreezeconsulting.com Version: 1 Tested on: 5.4.0-4parrot1-amd6...

Cross-site Scripting (XSS)

weison-tech/yii2-rbac is vulnerable to cross-site scripting XSS. The attack is possible because it does not sanitize a name filed to /contact.html via protected\core\modules\home\models\Contact.php , allowing an attacker to inject arbitrary script through it...

CVE-2019-16130

YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html...

CVE-2019-16130

YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html...

Design/Logic Flaw

YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html...

CVE-2019-16130

YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html...

CVE-2019-16130

Consolidated from connected documents: Affected product is YII2-CMS v1.0. The vulnerability is an XSS in the protected\core\modules\home\models\Contact.php component, triggered via the name field in /contact.html. The issue is documented under CVE-2019-16130 with multiple feeds (Red Hat, GV/OSV, ...

outdoorlivingmag.com XSS vulnerability

Open Bug Bounty ID: OBB-682609 Description| Value ---|--- Affected Website:| outdoorlivingmag.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mzplayer.se XSS vulnerability

Open Bug Bounty ID: OBB-678874 Description| Value ---|--- Affected Website:| mzplayer.se Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

medicalvision.se XSS vulnerability

Open Bug Bounty ID: OBB-678872 Description| Value ---|--- Affected Website:| medicalvision.se Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

centrexservices.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-676940 Description| Value ---|--- Affected Website:| centrexservices.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

agospap.com XSS vulnerability

Open Bug Bounty ID: OBB-675360 Description| Value ---|--- Affected Website:| agospap.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mldm.de XSS vulnerability

Open Bug Bounty ID: OBB-669624 Description| Value ---|--- Affected Website:| mldm.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mapsyou.com XSS vulnerability

Open Bug Bounty ID: OBB-667594 Description| Value ---|--- Affected Website:| mapsyou.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...