PT-2021-23561 · Unknown · Online Dj Booking Management System

Name of the Vulnerable Software and Affected Versions: Online DJ Booking Management System version 1.0 Description: The issue is related to Cross Site Scripting XSS in the view-booking-detail.php file. Recommendations: For Online DJ Booking Management System version 1.0, consider restricting acce...

Online Dj Booking Management System 跨站脚本漏洞

Online Dj Booking Management System is an online Dj booking management system by the individual developer Anuj Kumar. Online DJ Booking Management System suffers from a cross-site scripting vulnerability that originates from Online DJ Booking Management System 1.0 in view-booking-detail.php. An...

Online DJ Booking Management System 1.0 Cross Site Scripting

Exploit Title: Online DJ Booking Management System 1.0 - 'Multiple' Blind Cross-Site Scripting Date: 2021-10-06 Exploit Author: Yash Mahajan Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/online-dj-booking-management-system-using-php-and-mysql/ Version: V 1.0...

Online DJ Booking Management System 1.0 - (Multiple) Blind Cross-Site Scripting Vulnerability

Exploit Title: Online DJ Booking Management System 1.0 - 'Multiple' Blind Cross-Site Scripting Exploit Author: Yash Mahajan Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/online-dj-booking-management-system-using-php-and-mysql/ Version: V 1.0 Vulnerable endpoint:...

CVE-2021-38329

The DJ EmailPublish WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /dj-email-publish.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.7.2...

CVE-2021-38329

The DJ EmailPublish WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /dj-email-publish.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.7.2...

Cross site scripting

The DJ EmailPublish WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /dj-email-publish.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.7.2...

CVE-2021-38329 DJ EmailPublish <= 1.7.2 Reflected Cross-Site Scripting

The DJ EmailPublish WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /dj-email-publish.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.7.2...

CVE-2021-38329

The CVE-2021-38329 entry concerns the WordPress plugin DJ EmailPublish. Affected product: DJ EmailPublish WordPress plugin (versions up to and including 1.7.2). Root cause: reflected XSS caused by a reflected $_SERVER["PHP_SELF"] in~/dj-email-publish.php. Impact: attackers can inject arbitrary we...

CVE-2021-38329 DJ EmailPublish <= 1.7.2 Reflected Cross-Site Scripting

The DJ EmailPublish WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /dj-email-publish.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.7.2...

WordPress 插件 跨站脚本漏洞

WordPress Plugin is an open source application plugin for WordPress. The WordPress plugin DJ EmailPublish suffers from a cross-site scripting vulnerability that stems from the fact that version 1.7.2 of the DJ EmailPublish WordPress plugin is susceptible to reflected cross-site scripting attacks...

Cross-Site Request Forgery (CSRF) in azuracast/azuracast

✍️ Description Attacker able to enable any Streamer/DJ account section with CSRF attack. It does not matter at all that your application run in localhost or elsewhere, just it is enough to run on a browser and another low privilege user or attackers know the IP address or hostname of your...

dj-pharma.com Cross Site Scripting vulnerability OBB-1404047

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

djworld.in Cross Site Scripting vulnerability OBB-1363933

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

fr.virtualdj.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1154874 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting fr.virtualdj.com website...

dj-kitty.com Cross Site Scripting vulnerability

Security Researcher g0bl1nsec Helped patch 3608 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting dj-kitty.com website and its users. Following coordinated...

dj-tmp.nl Open Redirect vulnerability

Open Bug Bounty ID: OBB-1075082 Security Researcher RahadChowdhury Helped patch 1 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting dj-tmp.nl website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the I...

Friday Squid Blogging: Toraiz SQUID Digital Sequencer

Pioneer DJ has a new sequencer: the Toraiz SQUID: Sequencer Inspirational Device. The 16-track sequencer is designed around jamming and performance with a host of features to create "happy accidents" and trigger random sequences, modulations and chords. There are 16 RGB pads for playing in your...

Joomla DJ Image Slider 3.2.3 Database Disclosure

Exploit Title : Joomla comdjimageslider Components All in One 3.2.3 Database Backup Information Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 27/11/2018 Vendor Homepage : joomla.org dj-extensions.com Tested On : Windows and Linux Software Download Lin...

dj-couz.com XSS vulnerability

Open Bug Bounty ID: OBB-657112 Description| Value ---|--- Affected Website:| dj-couz.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...