wiltshiremuseum.org.uk XSS vulnerability

Vulnerable URL: http://www.wiltshiremuseum.org.uk/galleries/index.php?Action=3=88=%22%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3C/SCRIPT%3E Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 19:04 GMT Vulnerability...

CVE-2014-7694

The Corvette Museum aka com.appcorvettemuseum.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7655

The Dresden Transport Museum aka de.appack.project.vmd application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Corvette Museum aka com.appcorvettemuseum.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Dresden Transport Museum aka de.appack.project.vmd application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7694

The CVE-2014-7694 entry concerns the Corvette Museum Android app (com.app_corvettemuseum.layout) version 1.399, which does not verify SSL/TLS X.509 certificates. This weakness enables MITM attackers to spoof servers and exfiltrate sensitive data via a crafted certificate. Documented impact is par...

CVE-2014-7694

The Corvette Museum aka com.appcorvettemuseum.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7655

The Dresden Transport Museum Android app (de.appack.project.vmd) version 2.2 does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information. This affects confidentiality, integrity, and availability (partial impact) with...

Omeka 2.2.1 - Remote Code Execution Exploit

No description provided by source. !/usr/bin/env python Omeka 2.2.1 Remote Code Execution Exploit Vendor: Omeka Team CHNM GMU Product web page: http://www.omeka.org Affected version: 2.2.1 and 2.2 Summary: Omeka is a free, flexible, and open source web-publishing platform for the display of...

my-colex 1.4.2 (ab/xss/sql) Multiple Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! --...

Palms 3.6 Cross Site Scripting

1010101010101010101010101010101010101010101010101 0 0 1 /'\ /' /\ \ 1 0 /\ \ \ /, \ \ \ 0 1 //\ Dr.3v1l 0 1 0WebSecurity.IR 1 0 0 1 + E-Mail : [email protected] 1 0 + Y! : Doctor.3v1l 0 1 1 0 0 1 I'm 3v1l member from BlackDevils B0ys Team 1 0 0 1 1...

Health Museum built Station system multiple vulnerability and patch-vulnerability warning-the black bar safety net

Today a friend said his little Station old be black,called to help see what the problem is. Found a number of issues as follows: 下载 地址 :http://down.chinaz.com/soft/30318.htm Operating environment: ASP/Access Background directory:admin/login. asp No. 1 to add administrators Vulnerability...

WordPress Powerhouse Museum Collection Image Grid 0.9.1.1 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress Powerhouse Museum Collection Image Grid 0.9.1.1 Vulnerability...........Reflected Cross-site Scripting Download................http://api.powerhousemuseum.com/wordpress/ Release...

WordPress Plugin Powerhouse Museum Collection Image Grid 0.9.1.1 - tbpv_username Cross-Site Scripting

WordPress Plugin Powerhouse Museum Collection Image Grid 0.9.1.1 - tbpvusername Cross-Site Scripting source: https://www.securityfocus.com/bid/46006/info The Powerhouse Museum Collection Image Grid Plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly...

WordPress Plugin Powerhouse Museum Collection Image Grid 0.9.1.1 - 'tbpv_username' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46006/info The Powerhouse Museum Collection Image Grid Plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

Unfixed XSS vulnerability at www.sherlockholmesmuseum.com

Security researcher alexalghisi, has submitted on 27/10/2010 a cross-site-scripting XSS vulnerability affecting www.sherlockholmesmuseum.com, which at the time of submission ranked 3818997 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.lemaymuseum.org

Security researcher nullbyt3, has submitted on 28/08/2010 a cross-site-scripting XSS vulnerability affecting www.lemaymuseum.org, which at the time of submission ranked 1106669 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It is...

my-colex 1.4.2 SQL Injection / XSS

------------------------------------------------------- MULTIPLE REMOTE VULNERABILITIES --my-colex 1.4.2-- ------------------------------------------------------- CMS INFORMATION: --WEB: http://www.collector.ch/drupal5/index.php --DOWNLOAD: http://www.collector.ch/drupal5/?q=node/11 --DEMO:...

my-colex 1.4.2 - Authentication Bypass / SQL Injection / Cross-Site Scripting

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | MULTIPLE...

Unfixed XSS vulnerability at www.abdn.ac.uk

Security researcher pimpim, has submitted on 01/07/2009 a cross-site-scripting XSS vulnerability affecting www.abdn.ac.uk, which at the time of submission ranked 35535 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is currently...