PT-2018-14454

Name of the Vulnerable Software and Affected Versions s-cms version 3.0 Description The issue allows for SQL Injection, which can be exploited via the "0 id" parameter in the "member/post.php" endpoint or through the POST data sent to the "member/member login.php" endpoint. Recommendations For...

CVE-2018-17866: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in includes/core/um-actions-login.php in the "Ultimate Member - User Profile & Membership" plugin before 2.0.28 for WordPress allow remote attackers to inject arbitrary web script or HTML via the "Primary button Text" or "Second button text" field...

CVE-2018-17552

SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigate-user cookie...

CVE-2018-17552: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigate-user cookie...

PT-2018-14051

Name of the Vulnerable Software and Affected Versions Naviwebs Navigate CMS version 2.8 Description The issue allows remote attackers to bypass authentication. This is achieved via the navigate-user cookie in the login.php file. Recommendations For Naviwebs Navigate CMS version 2.8, update the...

btucson.com XSS vulnerability

Open Bug Bounty ID: OBB-680711 Description| Value ---|--- Affected Website:| btucson.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dus-rohr.de XSS vulnerability

Open Bug Bounty ID: OBB-672726 Description| Value ---|--- Affected Website:| dus-rohr.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

media-products.de XSS vulnerability

Open Bug Bounty ID: OBB-669897 Description| Value ---|--- Affected Website:| media-products.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pro-auto.ro XSS vulnerability

Open Bug Bounty ID: OBB-655837 Description| Value ---|--- Affected Website:| pro-auto.ro Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

paratuberculosis.net XSS vulnerability

Open Bug Bounty ID: OBB-643892 Description| Value ---|--- Affected Website:| paratuberculosis.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

obitron.de XSS vulnerability

Open Bug Bounty ID: OBB-636699 Description| Value ---|--- Affected Website:| obitron.de Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:...

manttus.com XSS vulnerability

Open Bug Bounty ID: OBB-635414 Description| Value ---|--- Affected Website:| manttus.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sei.cijun.sp.gov.br XSS vulnerability

Open Bug Bounty ID: OBB-633953 Description| Value ---|--- Affected Website:| sei.cijun.sp.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

control.energypk.ru XSS vulnerability

Open Bug Bounty ID: OBB-633391 Description| Value ---|--- Affected Website:| control.energypk.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

resonanceguild.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-632562 Description| Value ---|--- Affected Website:| resonanceguild.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ssip.dnpm.gov.br XSS vulnerability

Open Bug Bounty ID: OBB-632038 Description| Value ---|--- Affected Website:| ssip.dnpm.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Design/Logic Flaw

SGIN.CN xiangyun platform V9.4.10 has XSS via the loginurl parameter to /login.php...

CVE-2018-11553

SGIN.CN xiangyun platform V9.4.10 has XSS via the loginurl parameter to /login.php...

CVE-2018-11553: Improper Neutralization of Input During Web Page Generation

SGIN.CN xiangyun platform V9.4.10 has XSS via the loginurl parameter to /login.php...

PT-2018-10661

Name of the Vulnerable Software and Affected Versions SGIN.CN xiangyun platform version 9.4.10 Description The issue is related to a security problem where an attacker can inject malicious code. The estimated number of potentially affected devices worldwide is not available. There is no informati...