1162 matches found
inbxx.com XSS vulnerability
Vulnerable URL: https://inbxx.com/Error/400?aspxerrorpath=...
Nextcloud: Content Spoofing/Text Injection - docs.nextcloud.org
Issue: ====== Hey, I've found content spoofing also known as "Text Injection" in your sub-domain docs.nextcloud.org URL: ------- Here is the malicious URL: https://docs.nextcloud.org/.htacessCONTENT%20SPOOFING%20BY%20AHSAN Fix: Use custom 403 error page which doesn't contain user's text! I hope...
SecNews: Text injection on error page.
An user or attacker is able to inject his text into error page and can trap to user to visit malicious sites. Even if the XSS or error custom based 404 pages error injecting is not on the scope of our program,our committee decided to disclose it publicly...
Vimeo: Error page Text Injection.
Error page text injection...
Trello: Error Page Text Injection.
AS we can see in report an user or attacker is able to inject his text into error page and can trap to user to visit other site by adding following link /test/%2f../It%20has%20been%20changed%20by%20a%20new%20one%20https://www.malicious.com%20so%20go%20to%20the%20new%20one%20since%20this%20one A...
UBUNTU-CVE-2016-3164
Drupal 6.x before 6.38, 7.x before 7.43, and 8.x before 8.0.4 might allow remote attackers to conduct open redirect attacks by leveraging 1 custom code or 2 a form shown on a 404 error page, related to path manipulation...
Open redirect
Drupal 6.x before 6.38, 7.x before 7.43, and 8.x before 8.0.4 might allow remote attackers to conduct open redirect attacks by leveraging 1 custom code or 2 a form shown on a 404 error page, related to path manipulation...
CVE-2016-3164
Drupal 6.x before 6.38, 7.x before 7.43, and 8.x before 8.0.4 might allow remote attackers to conduct open redirect attacks by leveraging 1 custom code or 2 a form shown on a 404 error page, related to path manipulation...
CVE-2016-3164
Removed by vendor...
CVE-2016-3164: Undefined Security Weakness
Drupal 6.x before 6.38, 7.x before 7.43, and 8.x before 8.0.4 might allow remote attackers to conduct open redirect attacks by leveraging 1 custom code or 2 a form shown on a 404 error page, related to path manipulation...
hansme.com XSS vulnerability
Vulnerable URL: http://www.hansme.com/Admin/Error.aspx?Tip= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3279425 Google Pagerank| 3 VIP website status:| No Check hansme.com SSL...
RabbitMQ: /api/... XSS vulnerability
A cross-site scripting vulnerability was discovered in RabbitMQ, which allowed using api/ path info to inject and receive data. A remote attacker could use this flaw to create an "/api/..." URL, forcing a server error that resulted in the server returning an HTML page with embedded text from the...
PT-2016-5393
Name of the Vulnerable Software and Affected Versions Drupal versions 6.x through 6.37 Drupal versions 7.x through 7.42 Drupal versions 8.x through 8.0.3 Description The issue allows remote attackers to conduct open redirect attacks by leveraging custom code or a form shown on a 404 error page,...
Paragon Initiative Enterprises: Information Disclosure in Error Page
Hello, Here's an crafted URL which discloses web server used and version of same. https://paragonie.com/%PI Even-though most error pages are handled by generic pages in paragonie.com, above given 400 Bad Request sample is not handled. It seems this error page is because of Invalid URL Encoded %PI...
scuolesanbenedetto.ch XSS vulnerability
Vulnerable URL: http://scuolesanbenedetto.ch/biblioteca/error.php?message=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
Web Server Error Page Information Disclosure
The default error page sent by the remote web server discloses information that can aid an attacker, such as the server version and languages used by the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
withinsecurity: Error Page Text Injection #106350
Hello Team , Description : This report is similar to 106350 , as we can see in report an user or attacker is able to inject his text into error page and can trap to user to visit other site by adding following link...
sktmembership.co.kr XSS vulnerability
Vulnerable URL: http://sktmembership.co.kr/web/html/common/error/error.jsp?errMsg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 19691...
Wordpress Fastest Cache plugin XSS Vulnerability
Exploit for php platform in category web applications Exploit Title: Wordpress plugin wp-fastest-cache XSS Vulnerability Software Link: https://wordpress.org/plugins/wp-fastest-cache/ Version:0.8.5.5 Google dork: inurl:/wp-content/plugins/wp-fastest-cache The code in...