PT-2017-7261

Name of the Vulnerable Software and Affected Versions Realtyna RPL com rpl component versions prior to 8.9.5 for Joomla! Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that add a user via an add user action t...

mamaija.pl XSS vulnerability

Vulnerable URL:...

CVE-2017-15188

A persistent stored XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the hosts array parameter to module/admindevice/index.php...

CVE-2017-15215: Improper Neutralization of Input During Web Page Generation

Reflected XSS vulnerability in Shaarli v0.9.1 allows an unauthenticated attacker to inject JavaScript via the searchtags parameter to index.php. If the victim is an administrator, an attacker can for example take over the admin session or change global settings or add/delete links. It is also...

CVE-2017-15188: Improper Neutralization of Input During Web Page Generation

A persistent stored XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the hosts array parameter to module/admindevice/index.php...

CVE-2017-15215

CVE-2017-15215 is a reflected XSS vulnerability in Shaarli v0.9.1. An unauthenticated attacker can inject JavaScript via the searchtags parameter to index.php, potentially compromising admin sessions or altering global settings if the victim is an administrator, or executing JavaScript for unauth...

CVE-2017-15215

Reflected XSS vulnerability in Shaarli v0.9.1 allows an unauthenticated attacker to inject JavaScript via the searchtags parameter to index.php. If the victim is an administrator, an attacker can for example take over the admin session or change global settings or add/delete links. It is also...

CVE-2017-15188

A persistent stored XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the hosts array parameter to module/admindevice/index.php...

PT-2017-13880

Name of the Vulnerable Software and Affected Versions EyesOfNetwork version 5.1-0 Description A persistent XSS issue in the EyesOfNetwork web interface allows remote authenticated administrators to inject arbitrary web script or HTML via the hosts array parameter to the "module/admin...

PT-2017-13910

Name of the Vulnerable Software and Affected Versions Shaarli version 0.9.1 Description The issue allows an unauthenticated attacker to inject JavaScript via the searchtags parameter to "index.php". If the victim is an administrator, an attacker can take over the admin session, change global...

mmegi.bw XSS vulnerability

Vulnerable URL: http://www.mmegi.bw/index.php?sid=1%22%3E%3Cscript%3Ealert0;%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 80973 VIP website status:| No Coordinated Disclosure Timeline:...

proel.org XSS vulnerability

Vulnerable URL: http://www.proel.org/index.php?sw=alert/OPENBUGBOUNTY/...

Cross site scripting

Cross-site scripting XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the object parameter to module/adminconf/index.php...

CVE-2017-14985: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the url parameter to module/moduleframe/index.php...

CVE-2017-14983: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the object parameter to module/adminconf/index.php...

CVE-2017-14979: Undefined Security Weakness

Gxlcms uses an unsafe character-replacement approach in an attempt to restrict access, which allows remote attackers to read arbitrary files via modified pathnames in the s parameter to index.php, related to Lib/Admin/Action/TplAction.class.php and Lib/Admin/Common/function.php...

go.sayt.uz XSS vulnerability

Vulnerable URL: http://go.sayt.uz/index.php?a=search=13'"220.ro=0=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated...

PT-2017-13804

Name of the Vulnerable Software and Affected Versions EyesOfNetwork version 5.1-0 Description The issue is related to a cross-site scripting XSS vulnerability in the EyesOfNetwork web interface. This allows remote authenticated users to inject arbitrary web script or HTML via the url parameter to...

PT-2017-13802

Name of the Vulnerable Software and Affected Versions EyesOfNetwork version 5.1-0 Description A cross-site scripting XSS issue exists in the EyesOfNetwork web interface, allowing remote authenticated administrators to inject arbitrary web script or HTML. This can be achieved by manipulating the...

Sql injection

SQL Injection exists in /includes/event-management/index.php in the event-espresso-free aka Event Espresso Lite plugin v3.1.37.12.L for WordPress via the recurrenceid parameter to /wp-admin/admin.php...