northsmotors.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-500192 Description| Value ---|--- Affected Website:| northsmotors.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

spurofslindon.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-500173 Description| Value ---|--- Affected Website:| spurofslindon.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

gloucestertrademotorcentre.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-500171 Description| Value ---|--- Affected Website:| gloucestertrademotorcentre.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinat...

craignairncarworld.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-500188 Description| Value ---|--- Affected Website:| craignairncarworld.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

qualitycarsuk.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-449379 Description| Value ---|--- Affected Website:| qualitycarsuk.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

promotors.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-447030 Description| Value ---|--- Affected Website:| promotors.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

simpsonmotors.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-447026 Description| Value ---|--- Affected Website:| simpsonmotors.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

thecarmegastore.com XSS vulnerability

Open Bug Bounty ID: OBB-444775 Description| Value ---|--- Affected Website:| thecarmegastore.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

xcitment.com XSS vulnerability

Open Bug Bounty ID: OBB-432409 Description| Value ---|--- Affected Website:| xcitment.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

angusmackinnon.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-427263 Description| Value ---|--- Affected Website:| angusmackinnon.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

mts-vehiclesales.com XSS vulnerability

Open Bug Bounty ID: OBB-378322 Description| Value ---|--- Affected Website:| mts-vehiclesales.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

gillmanmotors.co.uk XSS vulnerability

Vulnerable URL: https://www.gillmanmotors.co.uk/email.php?subject=%22%3e%3csvg/onload=alert/xssposed/%3e Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

Arbitrary Code Execution

bcit-ci/codeigniter is vulnerable to arbitrary code execution. A flaw in system/libraries/Email.php allows attackers to leveraging control over the email - from field to insert sendmail command-line arguments...

revelationtoendmedia.org XSS vulnerability

Vulnerable URL: http://www.revelationtoendmedia.org/email.php?media=%22%3Etrolo%3Ci%3Etralala%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E=The%20Tongue%20-%20Part%202%20Controlling%20Your%20Destiny=$type Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017...

Code injection

An issue was discovered in by-email/by-email.php in the Invite Anyone plugin before 1.3.15 for WordPress. A user is able to change the subject and the body of the invitation mail that should be immutable, which facilitates a social engineering attack...

philamuseum.org XSS vulnerability

Vulnerable URL: http://www.philamuseum.org/main/email.php?uri=/exhibitions/852.html?utmsource=facebook%27"--!confirmOPENBUGBOUNTY%3C/script /K/medium=webadscampaign=designcurrentscontent=video' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type...

richardknightcars.co.uk XSS vulnerability

Vulnerable URL: http://www.richardknightcars.co.uk/email.php?subject=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:58 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

CVE-2016-10131

system/libraries/Email.php in CodeIgniter before 3.1.3 allows remote attackers to execute arbitrary code by leveraging control over the email-from field to insert sendmail command-line arguments...

CVE-2016-10131

system/libraries/Email.php in CodeIgniter before 3.1.3 allows remote attackers to execute arbitrary code by leveraging control over the email-from field to insert sendmail command-line arguments...

countymotorsleighltd.co.uk XSS vulnerability

Vulnerable URL: http://www.countymotorsleighltd.co.uk/email.php?subject=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...