deroeve.com XSS vulnerability

Vulnerable URL: http://www.deroeve.com/site/error.php?url=http%3A%2F%2Fwww.deroeve.com%2Fnl%2Fpage-219.htm=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS...

wizion.com.kh XSS vulnerability

Vulnerable URL: http://www.wizion.com.kh/error.php?msg=RK%3E%3C%3E%3C%3E%3C%3E%3C%3E%3C%3E%3C%3E%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

betpractice.es XSS vulnerability

Vulnerable URL: http://www.betpractice.es/error.php?msg=IRK%3E%3C%3E%3C%3E%3C%3E%3C%3E%3C%3E%3C%3E%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 01.12.2015 Latest check for patch:| 01.12.2015 22:10 GMT Vulnerability type:| XSS Vulnerabilit...

CVE-2015-6010: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Web Reference Database aka refbase through 0.9.6 and bleeding-edge before 2015-01-08 allow remote attackers to inject arbitrary web script or HTML via the 1 errorNo or 2 errorMsg parameter to error.php; the 3 viewType parameter to...

PT-2015-7113

Name of the Vulnerable Software and Affected Versions Web Reference Database refbase versions through 0.9.6 Web Reference Database refbase bleeding-edge versions before 2015-01-08 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via severa...

phpipam-1.1.010 XSS Vulnerability

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-PHPIPAM0812.txt Vendor: ================================ phpipam.net Product: ====================================== phpipam-1.1.010 Vulnerability Type:...

phpipam-1.1.010 XSS Vulnerability

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-PHPIPAM0812.txt Vendor: ================================ phpipam.net Product: ====================================== phpipam-1.1.010 Vulnerability Type:...

CVE-2015-6529

Multiple cross-site scripting XSS vulnerabilities in phpipam 1.1.010 allow remote attackers to inject arbitrary web script or HTML via the 1 section parameter to site/error.php or 2 ip parameter to site/tools/searchResults.php...

PT-2015-7289

Name of the Vulnerable Software and Affected Versions phpipam version 1.1.010 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the vulnerabilities can be exploited v...

CVE-2015-6529: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in phpipam 1.1.010 allow remote attackers to inject arbitrary web script or HTML via the 1 section parameter to site/error.php or 2 ip parameter to site/tools/searchResults.php...

hrlfdmultiservice.platinumgroup.it XSS vulnerability

Vulnerable URL: http://hrlfdmultiservice.platinumgroup.it/utils/error.php?errmsg= Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

kami-choice.com XSS vulnerability

Vulnerable URL: http://kami-choice.com/error.php?errmsg=...

forum.idea-russia.ru XSS vulnerability

Vulnerable URL: http://forum.idea-russia.ru/error.php?text= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 4 VIP website status:| No Check...

GrayCMS 1.1 Error.PHP Remote File Include Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class GrayCMSRemoteFileIncludePOCBase: vulID = '79199' version = '1' vulDate = '2005-04-26' author = ' '...

TextAds error.php error Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/19932/info TextAds is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execut...

phpFreeForum 1.0 rc2 - error.php message Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/29337/info phpFreeForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the...

CVE-2014-2024: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in classes/controller/error.php in Open Classifieds 2 before 2.1.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to shared-apartments-rooms/...

Unfixed XSS vulnerability at job.shnu.edu.cn

Security researcher Codeshift3r, has submitted on 16/12/2011 a cross-site-scripting XSS vulnerability affecting job.shnu.edu.cn, which at the time of submission ranked 132418 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is...

CVE-2011-2889: Exposure of Sensitive Information to an Unauthorized Actor

templates/system/error.php in Joomla! before 1.5.23 might allow remote attackers to obtain sensitive information via unspecified vectors that trigger an undefined value of a certain error field, leading to disclosure of the installation path. NOTE: this might overlap CVE-2011-2488...

phpMyAdmin error.php BBcode Tag XSS (PMASA-2010-9)

The version of phpMyAdmin fails to validate BBcode tags in user input to the 'error' parameter of the 'error.php' script before using it to generate dynamic HTML. An attacker may be able to leverage this issue to inject arbitrary HTML or script code into a user's browser to be executed within the...