13598 matches found
CVE-2017-12138
XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter...
CVE-2017-12138
XOOPS Core 2.5.8 contains an open redirect vulnerability in /modules/profile/index.php caused by the URL filter. The Nuclei template confirms an open redirect where an attacker can redirect users to a malicious site, potentially enabling phishing or other unauthorized operations. Affected softwar...
CVE-2017-12138: URL Redirection to Untrusted Site
XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter...
PT-2017-12359
Name of the Vulnerable Software and Affected Versions XOOPS Core version 2.5.8 Description The issue is related to a stored URL redirect bypass in the /modules/profile/index.php file due to the URL filter. Recommendations For XOOPS Core version 2.5.8, update to a newer version that contains a fix...
CVE-2017-11744
In MODX Revolution 2.5.7, the "key" and "name" parameters in the System Settings module are vulnerable to XSS. A malicious payload sent to connectors/index.php will be triggered by every user, when they visit this module...
CVE-2017-11744
In MODX Revolution 2.5.7, the "key" and "name" parameters in the System Settings module are vulnerable to XSS. A malicious payload sent to connectors/index.php will be triggered by every user, when they visit this module...
CVE-2017-11744: Improper Neutralization of Input During Web Page Generation
In MODX Revolution 2.5.7, the "key" and "name" parameters in the System Settings module are vulnerable to XSS. A malicious payload sent to connectors/index.php will be triggered by every user, when they visit this module...
PT-2017-12219
Name of the Vulnerable Software and Affected Versions MODX Revolution version 2.5.7 Description The issue concerns the System Settings module, where the key and name parameters are susceptible to XSS attacks. When a malicious payload is sent to the "connectors/index.php" endpoint, it will be...
Friends In War Make Or Break 1.7 SQL Injection
Exploit Title: Friends in War Make or Break 1.7 SQL Injection Dork: N/A Date: 26.07.2017 Vendor : http://software.friendsinwar.com/ Software: http://software.friendsinwar.com/downloads.php?catid=2&fileid=9 Demo: http://localhost/PATH/ Version: 1.7 Author: Ihsan Sencan SQL Injection/Exploit :...
Access Restriction Bypass
Moodle is vulnerable to access restriction bypass. The attacks exist because mod/chat/guisockets/index.php does not check for privileges for access to a daemon-mode Chat activity, allowing a malicious user unauthorized access to daemon-mode Chat activity...
qcmd.org XSS vulnerability
Vulnerable URL: http://www.qcmd.org/index.php/index.php?pageId=3=EN Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2056429 VIP website status:| No Check qcmd.org SSL connection:|...
hqcompany.com XSS vulnerability
Vulnerable URL: http://www.hqcompany.com/index.php?theme=7=1"...
safetyhow.com XSS vulnerability
Vulnerable URL: http://www.safetyhow.com/index.php/QualificationRequirementsForPollutionControlOfficerInThePhilippines?action=1"...
goolink.org XSS vulnerability
Vulnerable URL: http://www.goolink.org/index.php?mess=1"...
infob.de XSS vulnerability
Vulnerable URL: https://www.infob.de/index.php?go=on=1"...
Cross site scripting
In index.php in Zen Cart 1.6.0, the productsid parameter can cause XSS...
CVE-2017-10667: Improper Neutralization of Input During Web Page Generation
In index.php in Zen Cart 1.6.0, the productsid parameter can cause XSS...
CVE-2017-10667
In index.php in Zen Cart 1.6.0, the productsid parameter can cause XSS...
PT-2017-11420
Name of the Vulnerable Software and Affected Versions Zen Cart version 1.6.0 Description The issue is related to a potential XSS problem. In the index.php file, the products id parameter can cause XSS. Recommendations For Zen Cart version 1.6.0, avoid using the products id parameter in the affect...