xss.hitsteps.com XSS vulnerability

Open Bug Bounty ID: OBB-446681 Description| Value ---|--- Affected Website:| xss.hitsteps.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

magasin.de XSS vulnerability

Open Bug Bounty ID: OBB-423540 Description| Value ---|--- Affected Website:| magasin.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cyberciti.biz XSS vulnerability

Open Bug Bounty ID: OBB-413482 Description| Value ---|--- Affected Website:| cyberciti.biz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

buzzarab.com XSS vulnerability

Open Bug Bounty ID: OBB-411584 Description| Value ---|--- Affected Website:| buzzarab.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

CVE-2017-15974

tPanel 2009 allows SQL injection for Authentication Bypass via 'or 1=1 or ''=' to login.php...

CVE-2017-15974: Improper Neutralization of Special Elements used in an SQL Command

tPanel 2009 allows SQL injection for Authentication Bypass via 'or 1=1 or ''=' to login.php...

PT-2017-14328

Name of the Vulnerable Software and Affected Versions tPanel version 2009 Description The issue allows for SQL injection, which can be used for authentication bypass. This can be achieved by using specific input, such as 'or 1=1 or ''=', in the login process, potentially accessing the system...

ILIAS Detection (HTTP)

HTTP based detection of ILIAS eLearning. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.140443";...

PT-2017-13981

Name of the Vulnerable Software and Affected Versions Airtame HDMI dongle versions prior to 3.0 Description The issue allows an attacker to set their own session ID via a "Cookie: PHPSESSID=" header in the /bin/login.php file of the Web Panel. This can be used to achieve persistent access to the...

mebyonkernow.org XSS vulnerability

Vulnerable URL: https://www.mebyonkernow.org/pages/login.php?return=/articles/article.php?id=13'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8583555 VIP website status:| No...

islamibankbd.com XSS vulnerability

Vulnerable URL: http://www.islamibankbd.com/login.php?msg="Please, Sign In. Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 33245 VIP website status:| Yes Coordinated Disclosure...

clarksvillepartnershipdata.com XSS vulnerability

Vulnerable URL: http://clarksvillepartnershipdata.com/member/login.php?msg=Business Analyst Details: Description| Value ---|--- Patched:| No Latest check for patch:| 12.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

Cross site scripting

The out function in controllers/member/Login.php in dayrui FineCms 5.0.11 has XSS related to the Referer HTTP header with Internet Explorer...

CVE-2017-14194

The CVE-2017-14194 entry concerns dayrui FineCms version 5.0.11, where the out function in controllers/member/Login.php is reported to have an XSS vulnerability related to the Referer HTTP header in Internet Explorer. Multiple connected records (NVD, Red Hat, CNVD, CVE list mirrors, and regional ...

CVE-2017-14194: Improper Neutralization of Input During Web Page Generation

The out function in controllers/member/Login.php in dayrui FineCms 5.0.11 has XSS related to the Referer HTTP header with Internet Explorer...

PT-2017-13296

Name of the Vulnerable Software and Affected Versions FineCms version 5.0.11 Description The issue is related to an XSS vulnerability in the out function in controllers/member/Login.php. This vulnerability is triggered by the Referer HTTP header and affects Internet Explorer. Recommendations For...

sga.columbusstate.edu XSS vulnerability

Vulnerable URL: https://sga.columbusstate.edu/sganet/login.php?msg=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...

icedearthguild.com XSS vulnerability

Vulnerable URL: http://www.icedearthguild.com/recruiting/login.php?destination=test"'- -! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status...

CVE-2017-11718: URL Redirection to Untrusted Site

There is URL Redirector Abuse in MetInfo through 5.3.17 via the gourl parameter to member/login.php...

PT-2017-12198

Name of the Vulnerable Software and Affected Versions MetInfo versions prior to 5.3.18 Description The issue concerns URL Redirector Abuse via the gourl parameter to "member/login.php" API endpoint. Recommendations For MetInfo versions prior to 5.3.18, update to version 5.3.18 or later to resolve...