PT-2017-7860

Name of the Vulnerable Software and Affected Versions Synology Photo Station versions prior to 6.3-2958 Description The issue allows remote authenticated guest users to execute arbitrary commands. This can be achieved by using shell metacharacters in the X-Forwarded-For HTTP header to the...

ciao.de XSS vulnerability

Vulnerable URL: https://www.ciao.de/login.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 34306 VIP website status:| Yes Check ciao.de SSL connection:| Grade: A Coordinated...

yelites.org XSS vulnerability

Vulnerable URL: http://www.yelites.org/web/login.php?err=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3059223 VIP website status:| No Check yelites.org SSL connection:| Grade: ...

hckrs.ir XSS vulnerability

Vulnerable URL: http://hckrs.ir/login.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3771032 VIP website status:| No Check hckrs.ir SSL connection:| Grade: F Coordinated...

jaipurad.com XSS vulnerability

Vulnerable URL: http://www.jaipurad.com/login.php?msg=%22%22/%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E=internal.php Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

dailypioneer.com XSS vulnerability

Vulnerable URL: http://www.dailypioneer.com/cms/login.php?msg=OPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 52961 VIP website status:| No Check dailypioneer.com SSL...

pilotschedule.com XSS vulnerability

Vulnerable URL: http://www.pilotschedule.com/login.php?msg=...

edu.mapf.ir XSS vulnerability

Vulnerable URL: http://edu.mapf.ir/login.php?redirect=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check edu.mapf.ir SSL connection:| Grade: F Coordinated...

roshdportal.beenj.com XSS vulnerability

Vulnerable URL: http://roshdportal.beenj.com/login.php?redirect=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

gooyeshz.ir XSS vulnerability

Vulnerable URL: http://gooyeshz.ir/grades/login.php?redirect=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3056720 VIP website status:| No Check gooyeshz.ir SSL connection:| Grade: F Coordinated Disclosure...

reg.mtamini.ir XSS vulnerability

Vulnerable URL: http://reg.mtamini.ir/login.php?redirect=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check reg.mtamini.ir SSL...

publicdomainvectors.org XSS vulnerability

Vulnerable URL: http://publicdomainvectors.org/photocms/login.php?language=...

mail-viclarity.com XSS vulnerability

Vulnerable URL: https://mail-viclarity.com/login.php?message=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Che...

fr.pure360.com XSS vulnerability

Vulnerable URL: https://fr.pure360.com/login.php?message=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:03 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

WordPress WP-Password 插件-login.php文件err参数-跨站脚本漏洞

No description provided by source...

Dell SonicWALL Scrutinizer 11.0.1 - setUserSkin/deleteTab SQL Injection Remote Code Execution

Exploit for windows platform in category remote exploits !/usr/local/bin/python """ Dell SonicWall Scrutinizer Summary: ======== This exploits an pre-auth SQL Injection in the login.php script within an update statement to steal session data. You could also steal login creds which require...

AnyMacro邮件系统 login.php POST参数F_email SQL注入漏洞

No description provided by source...

网康安全网关(Netentsec ASG) 6.3 /WebPages/login.php errstr参数XSS漏洞

No description provided by source...

PT-2016-1725

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 0.8.8g Description The issue is related to insufficient access control in the Cacti network monitoring tool. It allows a remote authenticated user to bypass intended access restrictions by logging in as a user not...

fxscripts.com XSS vulnerability

Vulnerable URL: https://fxscripts.com/login.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Check fxscripts.c...