EUVD-2013-4715

Malware in sbrugna...

news-search.toshiba.co.jp Open Redirect vulnerability

Open Bug Bounty ID: OBB-1146008 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting news-search.toshiba.co.jp website and its users...

tingo.be XSS vulnerability

Open Bug Bounty ID: OBB-627862 Description| Value ---|--- Affected Website:| tingo.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jarlette.com XSS vulnerability

Open Bug Bounty ID: OBB-456511 Description| Value ---|--- Affected Website:| jarlette.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

biotifor.or.id XSS vulnerability

Vulnerable URL: http://biotifor.or.id/index.php?action=news.searchkeyword=&=3prompt/OPENBUGBOUNTY/...

CVE-2013-4870

SQL injection vulnerability in the News Search newssearch extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the News Search newssearch extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-4870

CVE-2013-4870 refers to a SQL injection vulnerability in the TYPO3 News Search (news_search) extension version 0.1.0. Multiple connected sources confirm that remote attackers can trigger arbitrary SQL commands via unspecified vectors, enabling partial confidentiality, integrity, and availability ...

CVE-2013-4870

SQL injection vulnerability in the News Search newssearch extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in index.php in TomatoCMS before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the q parameter in conjunction with a /news/search PATHINFO...

CVE-2010-1994

SQL injection vulnerability in index.php in TomatoCMS before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the q parameter in conjunction with a /news/search PATHINFO...

CVE-2010-1994

TomatoCMS is affected by a SQL injection in the /news/search handler. The vulnerability is triggered via the q parameter (e.g., q=) and creates injectable SQL in conjunction with the PATH_INFO /news/search. Affects TomatoCMS prior to 2.0.5; 2.0.5 fixes the issue, with the vulnerability reappearin...

Unfixed XSS vulnerability at www.ime.cas.cn

Security researcher xylitol, has submitted on 17/06/2008 a cross-site-scripting XSS vulnerability affecting www.ime.cas.cn, which at the time of submission ranked 140208 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2008. It is currentl...