WordPress Attitude 1.1.1 - Open Redirect Detection

WordPress Attitude theme 1.1.1 contains an open redirect vulnerability via the goto.php endpoint. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 --...

PT-2020-7912

Name of the Vulnerable Software and Affected Versions: Chamilo LMS versions prior to 1.9.10.2 Description: The issue allows for an open redirect via the link goto.php file, specifically through the link url parameter. Recommendations: For versions prior to 1.9.10.2, update to a version that...

alerteprix.net XSS vulnerability

Vulnerable URL: http://www.alerteprix.net/goto.php?url=javascript:alert%28/OPENBUGBOUNTY/%29 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8314146 VIP website status:| No Check...

phpwind v8.7 /goto.php 跨站脚本漏洞

No description provided by source...

CVE-2015-4135

Cross-site scripting XSS vulnerability in goto.php in phpwind 8.7 allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2015-4135

CVE-2015-4135 is an XSS vulnerability affecting phpwind 8.7, specifically goto.php with the url parameter. The root cause is improper handling of user input leading to injection of arbitrary web script or HTML. Exploitation details or in-the-wild status are not provided in the connected documents...

CVE-2015-4134: Undefined Security Weakness

Open redirect vulnerability in goto.php in phpwind 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...

PT-2015-6426

Name of the Vulnerable Software and Affected Versions phpwind version 8.7 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the url parameter in the goto.php file. Recommendations For...

PT-2015-6425

Name of the Vulnerable Software and Affected Versions phpwind version 8.7 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter in the goto.php file. Recommendations For phpwind version 8.7, consider...

CVE-2015-4135: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in goto.php in phpwind 8.7 allows remote attackers to inject arbitrary web script or HTML via the url parameter...