fine-arts-museum.be XSS vulnerability

Open Bug Bounty ID: OBB-92484 Description| Value ---|--- Affected Website:| fine-arts-museum.be Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

britishmuseum.org XSS vulnerability

Vulnerable URL: http://www.britishmuseum.org/visiting/planningyourvisit.aspx?x"1=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 39398 Google Pagerank| 8 VIP website status:| Yes...

britishmuseum.org XSS vulnerability

Vulnerable URL: http://www.britishmuseum.org/visiting/groupvisits.aspx?x"1=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 39398 Google Pagerank| 8 VIP website status:| Yes Check...

britishmuseum.org XSS vulnerability

Vulnerable URL: http://www.britishmuseum.org/visiting/familyvisits.aspx?x"1=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 39398 Google Pagerank| 8 VIP website status:| Yes Check...

britishmuseum.org XSS vulnerability

Vulnerable URL: http://www.britishmuseum.org/visiting/admissionandopeningtimes.aspx?x"1=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 39398 Google Pagerank| 8 VIP website status...

asia.si.edu XSS vulnerability

Vulnerable URL: http://www.asia.si.edu/collections/rapid-capture/default.cfm?searchTerm=:%27%22%22%3E%3Csvg/onload=alert%28/xssposed/%29%3E=1830=123 Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 09:33 GMT Vulnerability type:| XSS Vulnerabilit...

search.getty.edu XSS vulnerability

Open Bug Bounty ID: OBB-54490 Description| Value ---|--- Affected Website:| search.getty.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wiltshiremuseum.org.uk XSS vulnerability

Vulnerable URL: http://www.wiltshiremuseum.org.uk/galleries/index.php?Action=3=88=%22%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3C/SCRIPT%3E Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 19:04 GMT Vulnerability...

CVE-2014-7694

The Corvette Museum aka com.appcorvettemuseum.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7655

The Dresden Transport Museum aka de.appack.project.vmd application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Dresden Transport Museum aka de.appack.project.vmd application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Corvette Museum aka com.appcorvettemuseum.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7694

The Corvette Museum aka com.appcorvettemuseum.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7655

The Dresden Transport Museum Android app (de.appack.project.vmd) version 2.2 does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information. This affects confidentiality, integrity, and availability (partial impact) with...

CVE-2014-7694

The CVE-2014-7694 entry concerns the Corvette Museum Android app (com.app_corvettemuseum.layout) version 1.399, which does not verify SSL/TLS X.509 certificates. This weakness enables MITM attackers to spoof servers and exfiltrate sensitive data via a crafted certificate. Documented impact is par...

CVE-2014-7694: Undefined Security Weakness

The Corvette Museum aka com.appcorvettemuseum.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7655: Undefined Security Weakness

The Dresden Transport Museum aka de.appack.project.vmd application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Omeka 2.2.1 - Remote Code Execution Exploit

No description provided by source. !/usr/bin/env python Omeka 2.2.1 Remote Code Execution Exploit Vendor: Omeka Team CHNM GMU Product web page: http://www.omeka.org Affected version: 2.2.1 and 2.2 Summary: Omeka is a free, flexible, and open source web-publishing platform for the display of...

my-colex 1.4.2 (ab/xss/sql) Multiple Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! --...

Palms 3.6 Cross Site Scripting

1010101010101010101010101010101010101010101010101 0 0 1 /'\ /' /\ \ 1 0 /\ \ \ /, \ \ \ 0 1 //\ Dr.3v1l 0 1 0WebSecurity.IR 1 0 0 1 + E-Mail : [email protected] 1 0 + Y! : Doctor.3v1l 0 1 1 0 0 1 I'm 3v1l member from BlackDevils B0ys Team 1 0 0 1 1...