alerteprix.net XSS vulnerability

Vulnerable URL: http://www.alerteprix.net/goto.php?url=javascript:alert%28/OPENBUGBOUNTY/%29 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8314146 VIP website status:| No Check...

phpwind v8.7 /goto.php 跨站脚本漏洞

No description provided by source...

CVE-2015-4135

Cross-site scripting XSS vulnerability in goto.php in phpwind 8.7 allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2015-4135

CVE-2015-4135 is an XSS vulnerability affecting phpwind 8.7, specifically goto.php with the url parameter. The root cause is improper handling of user input leading to injection of arbitrary web script or HTML. Exploitation details or in-the-wild status are not provided in the connected documents...

CVE-2015-4135: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in goto.php in phpwind 8.7 allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2015-4134: Undefined Security Weakness

Open redirect vulnerability in goto.php in phpwind 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...