compadre.org XSS vulnerability

Open Bug Bounty ID: OBB-462783 Description| Value ---|--- Affected Website:| compadre.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

tourvacationstogo.com XSS vulnerability

Open Bug Bounty ID: OBB-284586 Description| Value ---|--- Affected Website:| tourvacationstogo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mckenziemdt.org XSS vulnerability

Vulnerable URL: http://www.mckenziemdt.org/login.cfm?error=Please%20login%20to%20proceed.=int=true"'--!=%2FflashCourse%2F%3Fsection%3Dint%26type%3DB=90FFB142D01D1F3168C741314EEF20AA Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS...

vetreriediempoli.it XSS vulnerability

Vulnerable URL: http://vetreriediempoli.it/login.cfm?redirect=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:28 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

mediacast.hobbsschools.net XSS vulnerability

Vulnerable URL: http://mediacast.hobbsschools.net/login.cfm?message="'; Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 2 VIP website...

Cross site scripting

Cross-site scripting XSS vulnerability in login.cfm in FuseTalk Forums 3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the windowed parameter...

Adobe ColdFusion login.cfm Query String XSS (APSB11-04)

The version of Adobe ColdFusion running on the remote host has is affected by a cross-site scripting vulnerability in the administrative web interface. Input to the query string of 'administrator/login.cfm' is not properly sanitized before being returned in an HTML response. A remote attacker can...