228 matches found
britishmuseum.org XSS vulnerability
Vulnerable URL: http://www.britishmuseum.org/visiting/planningyourvisit.aspx?x"1=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 39398 Google Pagerank| 8 VIP website status:| Yes...
britishmuseum.org XSS vulnerability
Vulnerable URL: http://www.britishmuseum.org/visiting/familyvisits.aspx?x"1=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 39398 Google Pagerank| 8 VIP website status:| Yes Check...
britishmuseum.org XSS vulnerability
Vulnerable URL: http://www.britishmuseum.org/visiting/admissionandopeningtimes.aspx?x"1=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 39398 Google Pagerank| 8 VIP website status...
asia.si.edu XSS vulnerability
Vulnerable URL: http://www.asia.si.edu/collections/rapid-capture/default.cfm?searchTerm=:%27%22%22%3E%3Csvg/onload=alert%28/xssposed/%29%3E=1830=123 Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 09:33 GMT Vulnerability type:| XSS Vulnerabilit...
search.getty.edu XSS vulnerability
Open Bug Bounty ID: OBB-54490 Description| Value ---|--- Affected Website:| search.getty.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
wiltshiremuseum.org.uk XSS vulnerability
Vulnerable URL: http://www.wiltshiremuseum.org.uk/galleries/index.php?Action=3=88=%22%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3C/SCRIPT%3E Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 19:04 GMT Vulnerability...
CVE-2014-7694
The Corvette Museum aka com.appcorvettemuseum.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7655
The Dresden Transport Museum aka de.appack.project.vmd application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Corvette Museum aka com.appcorvettemuseum.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Dresden Transport Museum aka de.appack.project.vmd application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7694
The CVE-2014-7694 entry concerns the Corvette Museum Android app (com.app_corvettemuseum.layout) version 1.399, which does not verify SSL/TLS X.509 certificates. This weakness enables MITM attackers to spoof servers and exfiltrate sensitive data via a crafted certificate. Documented impact is par...
CVE-2014-7694
The Corvette Museum aka com.appcorvettemuseum.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7655
The Dresden Transport Museum Android app (de.appack.project.vmd) version 2.2 does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information. This affects confidentiality, integrity, and availability (partial impact) with...
CVE-2014-7694: Undefined Security Weakness
The Corvette Museum aka com.appcorvettemuseum.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7655: Undefined Security Weakness
The Dresden Transport Museum aka de.appack.project.vmd application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Omeka 2.2.1 - Remote Code Execution Exploit
No description provided by source. !/usr/bin/env python Omeka 2.2.1 Remote Code Execution Exploit Vendor: Omeka Team CHNM GMU Product web page: http://www.omeka.org Affected version: 2.2.1 and 2.2 Summary: Omeka is a free, flexible, and open source web-publishing platform for the display of...
my-colex 1.4.2 (ab/xss/sql) Multiple Vulnerabilities
No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! --...
Palms 3.6 Cross Site Scripting
1010101010101010101010101010101010101010101010101 0 0 1 /'\ /' /\ \ 1 0 /\ \ \ /, \ \ \ 0 1 //\ Dr.3v1l 0 1 0WebSecurity.IR 1 0 0 1 + E-Mail : [email protected] 1 0 + Y! : Doctor.3v1l 0 1 1 0 0 1 I'm 3v1l member from BlackDevils B0ys Team 1 0 0 1 1...
Health Museum built Station system multiple vulnerability and patch-vulnerability warning-the black bar safety net
Today a friend said his little Station old be black,called to help see what the problem is. Found a number of issues as follows: 下载 地址 :http://down.chinaz.com/soft/30318.htm Operating environment: ASP/Access Background directory:admin/login. asp No. 1 to add administrators Vulnerability...
WordPress Powerhouse Museum Collection Image Grid 0.9.1.1 Cross Site Scripting
------------------------------------------------------------------------ Software................WordPress Powerhouse Museum Collection Image Grid 0.9.1.1 Vulnerability...........Reflected Cross-site Scripting Download................http://api.powerhousemuseum.com/wordpress/ Release...