26 matches found
thenational.ae XSS vulnerability
Open Bug Bounty ID: OBB-629538 Description| Value ---|--- Affected Website:| thenational.ae Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Dolibarr 7.0.0 - SQL Injection Vulnerability
Exploit for php platform in category web applications CVE-2018-10094 Dolibarr SQL Injection vulnerability Description Dolibarr is an "Open Source ERP & CRM for Business" used by many companies worldwide. It is available through GitHub or as distribution packages e.g .deb package. Threat The...
kat.how XSS vulnerability
Vulnerable URL: https://kat.how/search.php?q='"+autofocus+onfocus=alert'OPENBUGBOUNTY'value=OPENBUGBOUNTY"' /Style=position:fixed;top:0;left:0;font-size:999px; /Onmouseenter=confirmOPENBUGBOUNTY // Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status...
pisni.org.ua XSS vulnerability
Vulnerable URL: http://www.pisni.org.ua/search.php?phrase=" autofocus onfocus="alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 107261 VIP website status:| No Check...
Cross site scripting
DISPUTED Cross-site scripting XSS vulnerability in WordPress 2.0.0 allows remote attackers to inject arbitrary web script or HTML via scriptable attributes such as 1 onfocus and 2 onblur in the "author's website" field. NOTE: followup comments to the researcher's web log suggest that this issue i...
CVE-2006-0733
This CVE affects WordPress 2.0.0. The vulnerability is a Cross-Site Scripting (XSS) flaw allowing injection of scripts via scriptable attributes (onfocus/onblur) in the author’s website field. The issue is noted as potentially exploitable only by the same user who injects the XSS, limiting practi...