CVE-2020-8788: Improper Neutralization of Input During Web Page Generation

Synaptive Medical ClearCanvas ImageServer 3.0 Alpha allows XSS and HTML injection via the Default.aspx UserName parameter. NOTE: the issues/227 reference does not imply that the affected product can be downloaded from GitHub. It was simply a convenient location for a public bug report...

solomoncolors.com XSS vulnerability

Open Bug Bounty ID: OBB-611270 Description| Value ---|--- Affected Website:| solomoncolors.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-7669: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Sitecore Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above. The 'Log Viewer' application is vulnerable to a directory traversal attack, allowing an attacker to access arbitrary files from the host Operating System using a...

yoga.isport.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-562606 Description| Value ---|--- Affected Website:| yoga.isport.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

iredeem.com XSS vulnerability

Open Bug Bounty ID: OBB-547424 Description| Value ---|--- Affected Website:| iredeem.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

www2.brasilprev.com.br XSS vulnerability

Vulnerable URL: http://www2.brasilprev.com.br/Busca/Paginas/default.aspx?k=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

SQL injection vulnerability in the gid parameter of the Default.aspx page of the CMS system of the resource management platform of Beijing HBM Information Technology Co.

Resource Management Platform CMS is a comprehensive management and application platform based on the cloud service system, through a multi-layer system architecture, establishing a multi-level cloud platform and cloud application environment covering provinces, municipalities, counties, schools a...

CVE-2016-5048

SQL injection vulnerability in chat/staff/default.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary SQL commands via the user name field...

CVE-2016-5048

CVE-2016-5048 affects ReadyDesk 9.1 and targets the chat/staff/default.aspx login input. The user name field is vulnerable to SQL injection, allowing remote attackers to execute arbitrary SQL commands. The vulnerability is described in multiple sources (NVD entry and CERT/CC advisory) with a high...

CVE-2016-5048: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in chat/staff/default.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary SQL commands via the user name field...

Microsoft Education Cross Site Scripting

Document Title: =============== Microsoft Education - Stored Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1897 Release Date: ============= 2016-08-10 Vulnerability Laboratory ID VL-ID: ====================================...

Fancier /travel/Default. aspx parameters leixing injection vulnerability

No description provided by source...

Crown State Library System /Ajax/Default. aspx file UserId parameter SQL injection vulnerability

No description provided by source...

workyi人才系统 Default.aspx 参数PID SQL注入

No description provided by source...

furniturecore.com XSS vulnerability

Vulnerable URL: http://furniturecore.com/Default.aspx?tabid=41=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 772285 Google Pagerank| 3 VIP website status:| No Check...

PKPMBS工程质量监督管理系统 guestbook.aspx和Default.aspx 2处SQL注入漏洞

No description provided by source...

search.wlbz2.com XSS vulnerability

Open Bug Bounty ID: OBB-63467 Description| Value ---|--- Affected Website:| search.wlbz2.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Sitekit CMS 6.6 Default.aspx Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/16016/info Sitekit CMS is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to hav...

ifnuke - Multiple Vulnerabilities (0day)

No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : IfNuke Multiple Remote Vulnerabilities Affected Version : IfNuke 4.0.0 Discovery : www.abysssec.com...

Cross site scripting

Cross-site scripting XSS vulnerability in SPS/Portal/default.aspx in Service Desk in Matrix42 Service Store 5.3 SP3 aka 5.33.946.0 allows remote attackers to inject arbitrary web script or HTML via the query string...