Lucene search
K

10 matches found

CNNVD
CNNVD
added 2025/10/07 12:0 a.m.1 views

PuneethReddyHC Event Management 安全漏洞

PuneethReddyHC Event Management is an application by Puneeth Reddy H C Individual Developer. Helps users to register for events organized in university festivals with simple logic and security. A security vulnerability exists in PuneethReddyHC Event Management version 1.0, which stems from improp...

6.1CVSS6AI score0.0004EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/02/07 10:11 a.m.11 views

CVE-2025-25146 WordPress Songkick Concerts and Festivals plugin <= 0.9.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in saleandro Songkick Concerts and Festivals songkick-concerts-and-festivals allows Cross Site Request Forgery.This issue affects Songkick Concerts and Festivals: from n/a through = 0.9.7...

4.3CVSS0.00199EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/07 12:0 a.m.2 views

WordPress plugin Songkick Concerts and Festivals 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in t...

4.3CVSS8.5AI score0.00199EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/02/07 12:0 a.m.2 views

PT-2025-5955 · Songkick · Songkick Concerts/Festivals

Name of the Vulnerable Software and Affected Versions: Songkick Concerts and Festivals versions 0.9.7 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricki...

4.3CVSS9.4AI score0.00199EPSS
Exploits0References4
Openbugbounty
Openbugbounty
added 2020/08/13 1:44 a.m.8 views

newyorkfestivals.com Cross Site Scripting vulnerability OBB-1258440

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.8AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/08/22 6:58 p.m.12 views

newyorkfestivals.com XSS vulnerability

Vulnerable URL: http://www.newyorkfestivals.com/winners/2017/index.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 20.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 529040 VIP website status:| No Check newyorkfestivals.com SSL...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2016/08/07 11:59 a.m.9 views

festicket.com XSS vulnerability

Vulnerable URL: https://www.festicket.com/festivals/?location=...

6.9AI score
Exploits0
Openbugbounty
Openbugbounty
added 2015/07/30 1:20 p.m.11 views

cheltenhamfestivals.com XSS vulnerability

Vulnerable URL: http://www.cheltenhamfestivals.com/search/?Search=xss'" Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 14:00 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 529823 Google Pagerank| 7 VIP websi...

6.3AI score
Exploits0
The Hacker News
The Hacker News
added 2014/02/15 3:54 a.m.22 views

TESCO Customers' account details leaked online

You all were busy in celebrating Valentine’s Day with your loved ones, and the cyber criminals were too celebrating the day in their own way, and this time, with the TESCO customers. A list of over 2,240 Tesco.com Internet Shopping accounts was posted Online on the Pastebin website by some unknow...

6.8AI score
Exploits0
xssed
xssed
added 2008/01/07 12:0 a.m.7 views

Unfixed XSS vulnerability at cards.hindu-festivals.com

Security researcher Uber0n, has submitted on 01/07/2008 a cross-site-scripting XSS vulnerability affecting cards.hindu-festivals.com, which at the time of submission ranked 449174 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2008. It i...

6.6AI score
Exploits0References1
Rows per page
Query Builder