la-rochelle.onvasortir.com XSS vulnerability

Open Bug Bounty ID: OBB-102281 Description| Value ---|--- Affected Website:| la-rochelle.onvasortir.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

la-revolution2014.fr XSS vulnerability

Open Bug Bounty ID: OBB-101588 Description| Value ---|--- Affected Website:| la-revolution2014.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

la-razon.com XSS vulnerability

Vulnerable URL: http://www.la-razon.com/nacional/demandamar%C3%ADtima/"'--; Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 29551 Google Pagerank| 7 VIP website status:| Yes Check...

la-croix.com XSS vulnerability

Vulnerable URL: http://www.la-croix.com/lacroixconnection/forgotpassword/8604 Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 26859 Google Pagerank| 7 VIP...

lesgitesdelapapeterie.com XSS vulnerability

Vulnerable URL: http://www.lesgitesdelapapeterie.com//search/site/?q= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 20:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5601998 Google Pagerank| 0 VIP websit...

observatoiredelafranchise.fr XSS vulnerability

Vulnerable URL: http://www.observatoiredelafranchise.fr/creation-entreprise/moteur-recherche.htm?motRech=%22--%3E+%3C%2Fscript%3E%3Csvg%2Fonload%3D%27%3Balert%28%2FXSSPOSED%2F%29%3B%27%3E&enseigneMd=Choisir+une+enseigne Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check...

la-viande.fr XSS vulnerability

Open Bug Bounty ID: OBB-88352 Description| Value ---|--- Affected Website:| la-viande.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

cessi.org.ar XSS vulnerability

Vulnerable URL: http://www.cessi.org.ar/ver-noticias-encuesta-de-la-usal-sobre-adopcion-de-nuevas-tecnologias-1859 Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 14:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

carecredit.com XSS vulnerability

Vulnerable URL: http://www.carecredit.com/doctor-locator/results/Vision/Eye-Exams-Eye-Glasses/LA-QUINTA-CA/?Name="=25=61 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

CVE-2014-7731

The Radio de la Cato aka com.radio.de.la.cato application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7731

The CVE-2014-7731 entry concerns the Radio de la Cato (aka com.radio.de.la.cato) Android app version 2.0 failing to verify SSL/X.509 certificates. The root cause is improper certificate verification in TLS/SSL handling, allowing MITM attackers to spoof servers and obtain sensitive data via a craf...

CVE-2014-6838

The Groupama toujours la aka com.groupama.toujoursla application 1.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Groupama toujours la aka com.groupama.toujoursla application 1.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6838

The CVE-2014-6838 entry concerns the Groupama Toujours la app (com.groupama.toujoursla) for Android version 1.3.0, where X.509 certificate validation for SSL servers is not performed. This insecure cert handling can allow man-in-the-middle attackers to spoof servers and exfiltrate sensitive infor...

CVE-2014-6838

The Groupama toujours la aka com.groupama.toujoursla application 1.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5076

The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows attackers to obtain sensitive cached banking information via crafted intents, as demonstrated by the drozer framework...

Design/Logic Flaw

The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows attackers to obtain sensitive cached banking information via crafted intents, as demonstrated by the drozer framework...

CVE-2014-5076

The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows attackers to obtain sensitive cached banking information via crafted intents, as demonstrated by the drozer framework...

CVE-2014-5076

The CVE concerns the La Banque Postale Android app before version 3.2.6. The root cause is that the app does not prevent a component of another application from launching an activity, enabling an attacker to retrieve sensitive cached banking information via crafted intents (demonstrated by the dr...

Messagerie 1.0 Arbitrary User Removal DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4635/info Messagerie is a web message board application maintained by La Basse. An issue has been discovered in Messagerie, which could allow an attacker to delete arbitrary user accounts. Reportedly, submitting a special...