1130 matches found
CVE-2018-8973
OTCMS 3.20 allows XSS by adding a keyword or link to an article, as demonstrated by an admin/keyWorddeal.php?mudi=add request...
CVE-2018-8973
OTCMS 3.20 allows XSS by adding a keyword or link to an article, as demonstrated by an admin/keyWorddeal.php?mudi=add request...
CVE-2018-8973
OTCMS 3.20 is affected by a cross-site scripting (XSS) vulnerability exposed via adding a keyword or link to an article, demonstrated through an admin request to admin/keyWord_deal.php?mudi=add. The issue arises in the article/keyword handling mechanism and could allow injected script or HTML whe...
searchmyanmar.com XSS vulnerability
Open Bug Bounty ID: OBB-580163 Description| Value ---|--- Affected Website:| searchmyanmar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
catalogo.portacabos.com.br XSS vulnerability
Open Bug Bounty ID: OBB-571837 Description| Value ---|--- Affected Website:| catalogo.portacabos.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
adnkronos.com XSS vulnerability
Open Bug Bounty ID: OBB-552437 Description| Value ---|--- Affected Website:| adnkronos.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-6581
SQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the keyword, artist, or username parameter...
Joomla! Component JMS Music 1.1.1 - SQL Injection
Joomla! Component JMS Music 1.1.1 - SQL Injection Exploit Title: Joomla! Component JMS Music 1.1.1 - SQL Injection Dork: N/A Date: 01.02.2018 Vendor Homepage: https://www.joommasters.com/ Software Link: https://extensions.joomla.org/extensions/extension/multimedia/multimedia-players/jms-music/...
intra.phiconnect.com XSS vulnerability
Open Bug Bounty ID: OBB-511732 Description| Value ---|--- Affected Website:| intra.phiconnect.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Design/Logic Flaw
Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter...
CVE-2018-5072
Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter...
CVE-2018-5072
Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter...
usfca.edu XSS vulnerability
Open Bug Bounty ID: OBB-466666 Description| Value ---|--- Affected Website:| usfca.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
CVE-2017-17896
Readymade Job Site Script has XSS via the keyword parameter to the /job URI...
CVE-2017-17896
Readymade Job Site Script has XSS via the keyword parameter to the /job URI...
PHP Scripts Mall Readymade Job Site Script Cross-Site Scripting Vulnerability
PHP Scripts Mall Readymade Job Site Script is a PHP based job site script by PHP Scripts Mall India. The script includes features like job management, profile management and email notifications. A cross-site scripting vulnerability exists in PHP Scripts Mall Readymade Job Site Script. A remote...
CVE-2017-17896
CVE-2017-17896 affects Readymade Job Site Script with a cross-site scripting (XSS) vulnerability via the keyword parameter to the /job URI. The NVD entry reports a base score of 4.3 (CVSS2) and 6.1 (CVSS3), indicating that network access is required and user interaction is involved in a changed s...
[SECURITY] Fedora 26 Update: libextractor-1.6-2.fc26
libextractor is a simple library for keyword extraction. libextractor does not support all formats but supports a simple plugging mechanism such that you can quickly add extractors for additional formats, even without recompiling libextractor. libextractor typically ships with a dozen...
[SECURITY] Fedora 27 Update: libextractor-1.6-2.fc27
libextractor is a simple library for keyword extraction. libextractor does not support all formats but supports a simple plugging mechanism such that you can quickly add extractors for additional formats, even without recompiling libextractor. libextractor typically ships with a dozen...