fcnetwork.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1123653 Security Researcher securaji Helped patch 77 vulnerabilities Received 3 Coordinated Disclosure badges Received 4 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting fcnetwork.com website and it...

Joomla! com_hdwplayer 4.2 - search.php SQL Injection

Joomla! comhdwplayer 4.2 - search.php SQL Injection Exploit Title: Joomla! comhdwplayer 4.2 - 'search.php' SQL Injection Dork: inurl:"index.php?option=comhdwplayer" Date: 2020-03-23 Exploit Author: qw3rTyTy Vendor Homepage: https://www.hdwplayer.com/ Software Link:...

CVE-2019-20524

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter...

CVE-2019-20524

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter...

CVE-2019-20523

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter...

Cross site scripting

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter...

Cross site scripting

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter...

CVE-2019-20522

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter...

CVE-2019-20522

CVE-2019-20522 affects ilchCMS 2.1.23 and enables Cross-Site Scripting via the index.php/partner/index Link parameter. The connected sources consistently describe a client-side script execution vulnerability in ilchCMS, with no details provided on affected versions beyond 2.1.23 in public CVE rec...

CVE-2019-20523

CVE-2019-20523 affects ilchCMS 2.1.23, where an XSS vulnerability exists in the index.php/partner/index Name parameter. The issue allows injection of script into client-side context, as described in public sources. The NVD entry lists an overall impact of low to partial integrity impact (I:L) wit...

CVE-2019-20523

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter...

CVE-2019-20524

CVE-2019-20524 affects ilchCMS 2.1.23 and allows cross-site scripting via the Banner parameter in index.php/partner/index. The root cause is a reflected XSS vector that exposes client-side code execution opportunities when a banner parameter is manipulated, as described across multiple sources (e...

PT-2020-10498

Name of the Vulnerable Software and Affected Versions ilchCMS version 2.1.23 Description The issue allows for XSS via the Link parameter in the "index.php/partner/index" endpoint. Recommendations For ilchCMS version 2.1.23, avoid using the Link parameter in the "index.php/partner/index" endpoint...

PT-2020-10499

Name of the Vulnerable Software and Affected Versions ilchCMS version 2.1.23 Description The issue allows for XSS via the Name parameter in the "index.php/partner/index" endpoint. Recommendations For ilchCMS version 2.1.23, avoid using the Name parameter in the "index.php/partner/index" endpoint...

PT-2020-10500

Name of the Vulnerable Software and Affected Versions ilchCMS version 2.1.23 Description The issue allows for XSS via the index.php/partner/index API endpoint, specifically through the Banner parameter. Recommendations For ilchCMS version 2.1.23, avoid using the Banner parameter in the...

CVE-2019-20522: Improper Neutralization of Input During Web Page Generation

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter...

CVE-2019-20524: Improper Neutralization of Input During Web Page Generation

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter...

CVE-2019-20523: Improper Neutralization of Input During Web Page Generation

ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter...

CVE-2020-10218

The CVE-2020-10218 entry pertains to Sapplica Sentrifugo 3.2, where a Blind SQL Injection vulnerability exists in the index.php/holidaygroups/add id parameter caused by the HolidaydatesController.php addAction function. The issue allows an attacker to read data from the application’s database. Pu...

PT-2020-11979

Name of the Vulnerable Software and Affected Versions Sapplica Sentrifugo version 3.2 Description A Blind SQL Injection issue was discovered in the software. The issue is related to the addAction function in the HolidaydatesController.php file. It can be exploited via the id parameter in the...