livejournal.com XSS vulnerability

Open Bug Bounty ID: OBB-592021 Description| Value ---|--- Affected Website:| livejournal.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

livejournal.com XSS vulnerability

Open Bug Bounty ID: OBB-319873 Description| Value ---|--- Affected Website:| livejournal.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

livejournal.com XSS vulnerability

Vulnerable URL: http://www.livejournal.com/syn/list.bml%22%3E%3Cscript%3Ealert'OPENBUGBOUNTY'%3C/script%3E?page=1 Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

livejournal.com XSS vulnerability

Vulnerable URL: http://www.livejournal.com/support/help.bml?sort=date'accesskey='X' onclick='alert/OPENBUGBOUNTY/'=3264879331=communities,docs,entries,general,mobile,scrapbook,styles,syn,images,troubleshoot Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:|...

livejournal.com XSS vulnerability

Vulnerable URL: http://www.livejournal.com/shop/journalpromo.bml?tab=xxx=%22%3E%3Csvg%20onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 02.06.2017 Latest check for patch:| 02.06.2017 21:17 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

livejournal.com XSS vulnerability

Vulnerable URL: http://www.livejournal.com/update.bml?user=" Details: Description| Value ---|--- Patched:| Yes, at 21.02.2017 Latest check for patch:| 21.02.2017 19:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 236 VIP website status:| Yes Check...

livejournal.com XSS vulnerability

Vulnerable URL: http://www.livejournal.com/update.bml?repost= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 239 VIP website status:| Yes Check livejournal.com SSL connection:| Grade: B Coordinated Disclosure...

livejournal.com XSS vulnerability

Vulnerable URL: http://www.livejournal.com/talkpostdo.bml Details: Description| Value ---|--- Patched:| Yes, at 02.02.2017 Latest check for patch:| 02.02.2017 14:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 237 VIP website status:| Yes Check livejournal.co...

livejournal.com XSS vulnerability

Vulnerable URL: https://www.livejournal.com/support/submit/accounts Details: Description| Value ---|--- Patched:| Yes, at 05.09.2016 Latest check for patch:| 05.09.2016 13:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 241 VIP website status:| Yes Check...

livejournal.com XSS vulnerability

Vulnerable URL: http://www.livejournal.com/translate/edit.bml?lang=be%22%20onload%3dprompt%28/OPENBUGBOUNTY/%29%20bad%3d%22 Details: Description| Value ---|--- Patched:| Yes, at 13.01.2017 Latest check for patch:| 13.01.2017 11:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

livejournal.com Open Redirect vulnerability

Vulnerable URL: http://livejournal.com/misc/cleardomainsession.bml?return=http://openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 28.09.2016 Latest check for patch:| 28.09.2016 08:47 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank...

livejournal.com XSS vulnerability

Vulnerable URL: http://www.livejournal.com/misc/expungedlist.bml Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 236 VIP website status:| Yes Check livejournal.com SSL connection:| Grade: B Coordinated Disclosure...

livejournal.com XSS vulnerability

Vulnerable URL: http://www.livejournal.com/gsearch/?journal=1" Details: Description| Value ---|--- Patched:| Yes, at 22.09.2016 Latest check for patch:| 22.09.2016 13:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 193 Google Pagerank| 8 VIP website status:|...

UBUNTU-CVE-2015-3234

The OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows remote attackers to log into other users' accounts by leveraging an OpenID identity from certain providers, as demonstrated by the Verisign, LiveJournal, and StackExchange providers...

CVE-2015-3234

The OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows remote attackers to log into other users' accounts by leveraging an OpenID identity from certain providers, as demonstrated by the Verisign, LiveJournal, and StackExchange providers...

Drupal 6.x < 6.36 OpenID Security Bypass

The remote web server is running a version of Drupal that is 6.x prior to 6.36. It is, therefore, potentially affected by a security bypass vulnerability due to a flaw in the OpenID module. A remote attacker can exploit this flaw to log in as other users, including administrators. Note that victi...

LiveJournal 1.1 CSS HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9727/info LiveJournal is reportedly prone to HTML injection via Cascading Style Sheet CSS tags. It is possible to inject hostile HTML and script code into journal entries through this vulnerability. This could potentially...

LiveJournal Cleanhtml.PL HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15990/info LiveJournal is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...

Livejournal.com Cross Site Scripting

Exploit Title: Livejournal.com Cross Site Scripting Date: 27.02.2012 Author: Sony Software Link: http://www.livejournal.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/livejournalcom-cross-site-scripting.html...

Biggest Independent Russian Election site Hacked on election day

Biggest Independent Russian Election site Hacked on election day Popular Russian media websites, the major LiveJournal social network and the website of the country's biggest independent election watchdog, were inaccessible in hacking attacks for several hours on Sunday in what their employees sa...