mlb.mlb.com XSS vulnerability

Vulnerable URL: http://mlb.mlb.com/mlb/news/wintermeetings/y2007/archive.jsp?day=1%22--%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

mlb.mlb.com XSS vulnerability

Vulnerable URL: http://mlb.mlb.com/downloads/catalog.jsp?m=1%22--%3E%3C/script%3E%3Csvg/onload=%27;alert%28/OPENBUGBOUNTY/%29;%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

MLB Perfect Inning 15 - Customized SSL, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MLB Perfect Inning 15 published at the 'play' market has multiple vulnerabilities...

MLB.com At Bat - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MLB.com At Bat published at the 'play' market has multiple vulnerabilities...

espn.com.ar XSS vulnerability

Vulnerable URL: http://www.espn.com.ar/mlb/deportes/stats/fielding?order=true%22%3E%3Ch1/onmouseover=%27alert%28/XSSPOSED/%29%27%3EYVTALE Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:04 GMT Vulnerability type:| XSS Vulnerability status:|...

losangeles.dodgers.mlb.com XSS vulnerability

Vulnerable URL: http://losangeles.dodgers.mlb.com/la/2010/hello.jsp?imagename=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

espndeportes.espn.go.com XSS vulnerability

Vulnerable URL:...

mlb.mlb.com XSS vulnerability

Vulnerable URL: http://mlb.mlb.com/mlb/presspass/gamenotes.jsp?cid=mlb";alert/XSSPOSED/// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 7...

mlb.mlb.com XSS vulnerability

Open Bug Bounty ID: OBB-81833 Description| Value ---|--- Affected Website:| mlb.mlb.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

FBI Investigating Alleged Attack on Houston Astros

In one of the more bizarre alleged hacking stories to emerge recently, federal authorities are investigating whether employees of the St. Louis Cardinals hacked into systems belonging to the Houston Astros and got access to internal team conversations about players, trades, scouting reports, and...

mlb.mlb.com XSS vulnerability

Open Bug Bounty ID: OBB-51540 Description| Value ---|--- Affected Website:| mlb.mlb.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

m.mlb.com XSS vulnerability

Vulnerable URL: http://m.mlb.com/video/search?query=%22%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 19:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

mlb.mlb.com XSS vulnerability

Open Bug Bounty ID: OBB-51525 Description| Value ---|--- Affected Website:| mlb.mlb.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

mlb.com XSS vulnerability

Open Bug Bounty ID: OBB-51522 Description| Value ---|--- Affected Website:| mlb.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

CVE-2014-5993

The MLB Preplay aka com.preplay.android.mlb application 5.4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The MLB Preplay aka com.preplay.android.mlb application 5.4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5993

The CVE-2014-5993 entry concerns the MLB Preplay Android app (com.preplay.android.mlb), version 5.4.2. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certifica...

CVE-2014-5993

The MLB Preplay aka com.preplay.android.mlb application 5.4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

secure.mlb.com XSS vulnerability

Open Bug Bounty ID: OBB-47267 Description| Value ---|--- Affected Website:| secure.mlb.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...