13436 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in SourceBans before 2.0 pre-alpha allows remote attackers to inject arbitrary web script or HTML via the advSearch parameter to index.php...
CVE-2015-8349
SourceBans before 2.0 pre-alpha is affected by CVE-2015-8349, a Cross-Site Scripting (XSS) vulnerability in the advSearch parameter of index.php. The root cause is insufficient filtration/validation of input data, allowing remote attackers to inject arbitrary web script or HTML. Exploitation cont...
CVE-2015-8349: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in SourceBans before 2.0 pre-alpha allows remote attackers to inject arbitrary web script or HTML via the advSearch parameter to index.php...
PT-2017-7398
Name of the Vulnerable Software and Affected Versions SourceBans versions prior to 2.0 pre-alpha Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the advSearch parameter to "index.php". Recommendations For versions prior to 2.0...
chine.in XSS vulnerability
Vulnerable URL: https://chine.in/mandarin/dictionnaire/index.php?q=arbre Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 132594 VIP website status:| No Coordinated Disclosure...
Cross site scripting
Cross-site scripting XSS vulnerability in C.P.Sub 5.2 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to index.php...
CVE-2017-12856
Cross-site scripting XSS vulnerability in C.P.Sub 5.2 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to index.php...
CVE-2017-12856
Cross-site scripting XSS vulnerability in C.P.Sub 5.2 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to index.php...
CVE-2017-12856
Technical details such as affected products, versions, root cause, and remediation are not publicly available in the provided documents. Monitor for updates from the listed sources; additional details may be released in future advisories.
CVE-2017-12856: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in C.P.Sub 5.2 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to index.php...
PT-2017-12730
Name of the Vulnerable Software and Affected Versions C.P.Sub version 5.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to "index.php". Recommendations For version 5.2, avoid using the keyword parameter in the...
plasticoscusen.com XSS vulnerability
Open Bug Bounty ID: OBB-281403 Description| Value ---|--- Affected Website:| plasticoscusen.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
dott.com.ng XSS vulnerability
Vulnerable URL: http://www.dott.com.ng//index.php?cityid=2〈=fr=;alert/XSSPOSED///';alert/XSSPOSED///";alert/XSSPOSED///";alert/XSSPOSED///--alert/XSSPOSED/...
Synology Photo Station Information Disclosure Vulnerability
Synology Photo Station is an online photo album and blog owned and managed by DSM users. An information disclosure vulnerability exists in index.php in Synology Photo Station. A remote attacker can exploit the vulnerability to obtain sensitive information in certain ways...
CVE-2017-11155
An information exposure vulnerability in index.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to obtain sensitive system information via unspecified vectors...
CVE-2017-11155
CVE-2017-11155 affects Synology Photo Station and is described as an information-disclosure vulnerability in index.php present in versions prior to 6.7.3-3432 and 6.3-2967. Remote attackers could obtain sensitive system information via unspecified vectors. The connected sources document this CVE ...
CVE-2017-11155: Observable Behavioral Discrepancy
An information exposure vulnerability in index.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to obtain sensitive system information via unspecified vectors...
PT-2017-11780
Name of the Vulnerable Software and Affected Versions Synology Photo Station versions prior to 6.7.3-3432 Synology Photo Station versions prior to 6.3-2967 Description An information exposure issue in index.php allows remote attackers to obtain sensitive system information via unspecified vectors...
CVE-2017-12138
XOOPS Core 2.5.8 contains an open redirect vulnerability in /modules/profile/index.php caused by the URL filter. The Nuclei template confirms an open redirect where an attacker can redirect users to a malicious site, potentially enabling phishing or other unauthorized operations. Affected softwar...