485 matches found
Design/Logic Flaw
joyplus-cms 1.6.0 has XSS in manager/adminvod.php via the keyword parameter...
CVE-2018-10073
joyplus-cms 1.6.0 has XSS in manager/adminvod.php via the keyword parameter...
CVE-2018-10073
joyplus-cms 1.6.0 has XSS in manager/adminvod.php via the keyword parameter...
CVE-2018-10073
The CVE-2018-10073 entry applies to joyplus-cms 1.6.0, where a cross-site scripting vulnerability exists in manager/admin_vod.php via the keyword parameter. Root cause is improper handling of the keyword input leading to XSS. Documents state the affected software and vulnerable parameter but do n...
CVE-2018-10073: Improper Neutralization of Input During Web Page Generation
joyplus-cms 1.6.0 has XSS in manager/adminvod.php via the keyword parameter...
Design/Logic Flaw
Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter...
CVE-2018-5072
Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter...
CVE-2018-5072
Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter...
CVE-2018-5072: Improper Neutralization of Input During Web Page Generation
Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter...
usfca.edu XSS vulnerability
Open Bug Bounty ID: OBB-466666 Description| Value ---|--- Affected Website:| usfca.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
CVE-2017-17896
Readymade Job Site Script has XSS via the keyword parameter to the /job URI...
CVE-2017-17896
Readymade Job Site Script has XSS via the keyword parameter to the /job URI...
CVE-2017-17896: Improper Neutralization of Input During Web Page Generation
Readymade Job Site Script has XSS via the keyword parameter to the /job URI...
PHP Scripts Mall Readymade Job Site Script Cross-Site Scripting Vulnerability
PHP Scripts Mall Readymade Job Site Script is a PHP based job site script by PHP Scripts Mall India. The script includes features like job management, profile management and email notifications. A cross-site scripting vulnerability exists in PHP Scripts Mall Readymade Job Site Script. A remote...
CVE-2017-17896
CVE-2017-17896 affects Readymade Job Site Script with a cross-site scripting (XSS) vulnerability via the keyword parameter to the /job URI. The NVD entry reports a base score of 4.3 (CVSS2) and 6.1 (CVSS3), indicating that network access is required and user interaction is involved in a changed s...
PT-2017-15081
Name of the Vulnerable Software and Affected Versions Readymade Job Site Script affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. The /job URI is affected, specifically through the keyword parameter. Recommendations...
CVE-2017-17642
Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...
CVE-2017-17642
Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...