inquiry.princetonreview.com XSS vulnerability

Vulnerable URL: http://inquiry.princetonreview.com/away/?value=josaiintlhub2=FS=%22/%3E%3CsvG/onLoad=alert%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

OneThird CMS vulnerable to cross-site scripting

Overview OneThird CMS provided by SpiQe Software contains a cross-site scripting vulnerability CWE-79 due to an issue in processing the inquiry form. Note that this vulnerability is different from JVN49408248. Satoshi Takagi of Cryptography Laboratory,Department of Information and Communication...

JVN#13003724: OneThird CMS vulnerable to cross-site scripting

OneThird CMS provided by SpiQe Software contains a cross-site scripting vulnerability CWE-79 due to an issue in processing the inquiry form. Impact An arbitrary script may be executed on the logged in user's web browser. Solution Update the Software Update to the latest version according to the...

event.asrock.com XSS vulnerability

Vulnerable URL: http://event.asrock.com/inquiry/?Model= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check event.asrock.com SSL...

Stored Cross-Site Scripting Vulnerability in DBSHOP_0.9.3_Beta

DBShop is an open source e-commerce online store system developed using endFramework. A stored cross-site scripting vulnerability exists at DBSHOP0.9.3Beta /module/Goods/view/goods/ask/index.phtml. Due to the failure to handle the output to the page of the inquiry response, the content is directl...

Threat Outbreak Alert RuleID21457: Email Messages Distributing Malicious Software on March 9, 2016

Medium Alert ID: 43961 First Published: 2016 March 9 15:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21457 may contain the following files: Name | Siz...

Updated ruby-mail packages fix security vulnerability

The Mail library does not impose a length limit on email addresses, so an attacker can send a long spam message via a recipient address unless there is a limit on the application's side. The attacker-injected message in the recipient address is processed by the server. This type of vulnerability...

Threat Outbreak Alert RuleID20063: Email Messages Distributing Malicious Software on December 13, 2015

Medium Alert ID: 42650 First Published: 2015 December 14 14:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20063 may contain the following files: Name |...

Threat Outbreak Alert RuleID19771: Email Messages Distributing Malicious Software on December 1, 2015

Medium Alert ID: 42422 First Published: 2015 December 1 13:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19771 may contain the following files: Name |...

Threat Outbreak Alert RuleID19181: Email Messages Distributing Malicious Software on November 17, 2015

Medium Alert ID: 42134 First Published: 2015 November 18 14:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19181 may contain the following files: Name |...

Threat Outbreak Alert RuleID16129: Email Messages Distributing Malicious Software on June 23, 2015

Medium Alert ID: 39480 First Published: 2015 June 23 13:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16129 may contain the following files: Name | Siz...

Congress Looking Into Restricting Power of Government-Owned CAs

UPDATE–As the debate over potential government interference with encryption technologies rages in countries around the world, Congress is now going down a different path, asking technology companies whether it’s feasible and potentially effective for certificate authorities to restricting the way...

Threat Outbreak Alert RuleID13387: Email Messages Distributing Malicious Software on February 3, 2015

Medium Alert ID: 37329 First Published: 2015 February 3 15:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13387 may contain the following files: Name |...

Threat Outbreak Alert RuleID13363: Email Messages Distributing Malicious Software on February 2, 2015

Medium Alert ID: 37308 First Published: 2015 February 2 15:06 GMT Last Updated: 2015 February 2 20:54 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13363...

Threat Outbreak Alert RuleID13153: Email Messages Distributing Malicious Software on January 18, 2015

Medium Alert ID: 37054 First Published: 2015 January 20 11:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13153 may contain the following files: Name |...

Threat Outbreak Alert RuleID11569: Email Messages Distributing Malicious Software on September 15, 2014

Medium Alert ID: 35726 First Published: 2014 September 16 12:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11569 may contain the following files: Name ...

Threat Outbreak Alert: Fake Payment Information Email Messages on May 29, 2014

Medium Alert ID: 34409 First Published: 2014 May 29 13:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product inquiry notification for the recipient. The text in the email message attempts to convince the recipient...

Threat Outbreak Alert: Fake Price Inquiry Notification Email Messages on March 31, 2014

Medium Alert ID: 33599 First Published: 2014 April 1 14:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a price inquiry notification for the recipient. The text in the email message attempts to convince the recipient ...

webERP 4.11.3 - 'SalesInquiry.php?SortBy' SQL Injection

============================================================== Title ...| SQL Injection in webERP Version .| 4.11.3 Date ....| 28.02.2014 Found ...| HauntIT Blog Home ....| http://www.weberp.org ==============================================================...

Threat Outbreak Alert: Fake Business Inquiry Notification Email Messages on January 27, 2014.

Medium Alert ID: 32590 First Published: 2014 January 28 21:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment for the recipient. The email message attempts to convince the recipient to open the attachment...