5 matches found
ncagr.gov XSS vulnerability
Vulnerable URL: http://www.ncagr.gov/vet/aws/cet/NameSearch.asp?SHELTER=1"...
courts.phila.gov XSS vulnerability
Open Bug Bounty ID: OBB-85700 Description| Value ---|--- Affected Website:| courts.phila.gov Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
tropicos.org XSS vulnerability
Open Bug Bounty ID: OBB-47801 Description| Value ---|--- Affected Website:| tropicos.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
PT-2010-5233
Name of the Vulnerable Software and Affected Versions WSN Links versions 5.0.x through 5.0.80 WSN Links versions 5.1.x through 5.1.50 WSN Links versions 6.0.x through 6.0.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the namecondition or...
CVE-2010-4006: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x before 5.1.51, and 6.0.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via the 1 namecondition or 2 namesearch parameter...