CVE-2018-5978: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Facebook Style Php Ajax Chat Zechat 1.5 via the login.php User field...

PT-2018-17264

Name of the Vulnerable Software and Affected Versions: Facebook Style Php Ajax Chat Zechat version 1.5 Description: A SQL Injection issue exists in the login functionality. The User field in the login.php file is vulnerable to SQL injection attacks. Recommendations: For version 1.5, consider...

ndm.anmw.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-526480 Description| Value ---|--- Affected Website:| ndm.anmw.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

atherton.net XSS vulnerability

Open Bug Bounty ID: OBB-521640 Description| Value ---|--- Affected Website:| atherton.net Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosur...

CVE-2017-17970

Multiple SQL injection vulnerabilities in Muviko 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 email parameter to login.php; the 2 seasonid parameter to themes/flixer/ajax/loadseason.php; the 3 movieid parameter to themes/flixer/ajax/getrating.php; the 4 rating or 5 movie...

PT-2018-6600

Name of the Vulnerable Software and Affected Versions: Muviko version 1.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters, including the email parameter to "login.php", the season id parameter to "themes/flixer/ajax/loa...

CVE-2017-17970: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Muviko 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 email parameter to login.php; the 2 seasonid parameter to themes/flixer/ajax/loadseason.php; the 3 movieid parameter to themes/flixer/ajax/getrating.php; the 4 rating or 5 movie...

Muviko 1.1 SQL Injection

Exploit Title: Muviko 1.1 - Multiple SQL Injection Exploit Author: Ahmad Mahfouz Contact: http://twitter.com/eln1x Date: 09/01/2018 CVE: CVE-2017-17970 Vendor Homepage: https://www.muvikoscript.com Version: 1.1 Tested on: Mac OS...

Muviko 1.1 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Muviko 1.1 - Multiple SQL Injection Exploit Author: Ahmad Mahfouz Contact: http://twitter.com/eln1x Date: 09/01/2018 CVE: CVE-2017-17970 Vendor Homepage: https://www.muvikoscript.com Version: 1.1 Tested on: Mac OS...

terrasim.com XSS vulnerability

Open Bug Bounty ID: OBB-490284 Description| Value ---|--- Affected Website:| terrasim.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based ...

imperfectproduce.com XSS vulnerability

Open Bug Bounty ID: OBB-484990 Description| Value ---|--- Affected Website:| imperfectproduce.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

plotexchange.com XSS vulnerability

Open Bug Bounty ID: OBB-484358 Description| Value ---|--- Affected Website:| plotexchange.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

padigift.com XSS vulnerability

Open Bug Bounty ID: OBB-472343 Description| Value ---|--- Affected Website:| padigift.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

www3.kandagaigo.ac.jp XSS vulnerability

Open Bug Bounty ID: OBB-467077 Description| Value ---|--- Affected Website:| www3.kandagaigo.ac.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

constructingskills.com.au XSS vulnerability

Open Bug Bounty ID: OBB-461661 Description| Value ---|--- Affected Website:| constructingskills.com.au Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventi...

babacarrental.com XSS vulnerability

Open Bug Bounty ID: OBB-459366 Description| Value ---|--- Affected Website:| babacarrental.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

ignycsm.com XSS vulnerability

Open Bug Bounty ID: OBB-459363 Description| Value ---|--- Affected Website:| ignycsm.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

nregsburdwan.com XSS vulnerability

Open Bug Bounty ID: OBB-459353 Description| Value ---|--- Affected Website:| nregsburdwan.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

taaol.com XSS vulnerability

Open Bug Bounty ID: OBB-459030 Description| Value ---|--- Affected Website:| taaol.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

admin.julienews.it XSS vulnerability

Open Bug Bounty ID: OBB-458183 Description| Value ---|--- Affected Website:| admin.julienews.it Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...