RSS for Yandex Turbo < 1.30 - Authenticated Stored Cross-Site Scripting (XSS)

The plugin did not properly sanitise the user inputs from its Счетчики settings tab before outputting them back in the page, leading to authenticated stored Cross-Site Scripting issues As admin, Navigate to Setting Яндекс.Турбо Счетчики and enter a payload such as " onmouseover="alert1 into all t...

RSS for Yandex Turbo < 1.30 - Authenticated Stored Cross-Site Scripting (XSS)

The plugin did not properly sanitise the user inputs from its Счетчики settings tab before outputting them back in the page, leading to authenticated stored Cross-Site Scripting issues PoC As admin, Navigate to Setting Яндекс.Турбо Счетчики and enter a payload such as " onmouseover="alert1 into a...

liveinternet.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1088332 Security Researcher Broly157 Helped patch 1679 vulnerabilities Received 7 Coordinated Disclosure badges Received 16 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting liveinternet.ru website a...

liveinternet.ru XSS vulnerability

Open Bug Bounty ID: OBB-698452 Description| Value ---|--- Affected Website:| liveinternet.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

liveinternet.ru XSS vulnerability

Open Bug Bounty ID: OBB-466022 Description| Value ---|--- Affected Website:| liveinternet.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

liveinternet.ru Open Redirect vulnerability

Vulnerable URL: http://www.liveinternet.ru/cgi-bin/adv.fcgi?click=1400027=http://openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 17.08.2017 Latest check for patch:| 17.08.2017 13:42 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank...

liveinternet.ru Open Redirect vulnerability

Vulnerable URL: http://www.liveinternet.ru/cgi-bin/adv.fcgi?click=996679=https://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 24.08.2017 Latest check for patch:| 24.08.2017 06:53 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

liveinternet.ru XSS vulnerability

Vulnerable URL: http://www.liveinternet.ru/search/?q=test-2==="=1=6=4&d1;=&m1;=&y1;=&d2;=&m2;=&y2;= Details: Description| Value ---|--- Patched:| Yes, at 07.08.2017 Latest check for patch:| 07.08.2017 18:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 390...