40 matches found
tamilchristianshop.com XSS vulnerability
Open Bug Bounty ID: OBB-547922 Description| Value ---|--- Affected Website:| tamilchristianshop.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2017-8103
In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event...
dx.com XSS vulnerability
Vulnerable URL: http://www.dx.com/s/123?PriceIntvl=1-94=100' onmouseover=alert/xssposed/=AvgRating=2 Details: Description| Value ---|--- Patched:| Yes, at 18.01.2016 Latest check for patch:| 18.01.2016 04:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1667...
Discuz!多版本 存储型XSS脚本漏洞
简要描述： 2009年一次偶然间测试发现的此XSS漏洞，因为是存储型的，我想大家应该知道它的危害吧。相隔这么多年DZ不断的更新版本，但此漏洞依然存在,今天就发布出来吧！留着也没什么用会长毛的，呵呵。 在此我要感谢一下我的好朋友Jackal在09年的时候一起帮我测试漏洞的。 当时我们一起测试的是DZ6.0-DZ7.2，不知道是不是通杀啊。哈哈！没有一个一个去测试。有条件的去测试一下吧。 详细说明： 发贴进入源码模式，写入如下的exp emailurlimghttp://qhkest.com onmouseover=alert/DZ-xss-0day/; /img /url/email...
Cross site scripting
Cross-site scripting XSS vulnerability in Small Pirate SPirate 2.1 allows remote attackers to inject arbitrary web script or HTML via an onmouseover action in an img BBCode tag within a url BBCode tag...
CVE-2009-1408
Cross-site scripting XSS vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or HTML allows remote attackers to inject arbitrary web script or HTML via Javascript events such as onmouseover in nested BBcode tags, as demonstrated using 1 email, 2 img, and 3 url...
Microsoft Internet Explorer 7 - Clickjacking
Application Name : Ä°nternet Explorer 7 Vulnerable Type : Clickjacking Author : UzmiX function updateboxevt mouseX=evt.pageX?evt.pageX:evt.clientX; mouseY=evt.pageY?evt.pageY:evt.clientY; document.getElementById'open'.style.left=mouseX-2; document.getElementById'open'.style.top=mouseY-2;...
CVE-2006-6977
Cross-site scripting XSS vulnerability in the "Basic Toolbar Selection" in FreeTextBox allows remote attackers to execute arbitrary JavaScript via the javascript: URI in the 1 href or 2 onmouseover attribute of the A HTML tag...
MS Internet Explorer 6.0 (mshtml.dll) Denial of Service Exploit
Title : MS Internet Explorer 6.0 mshtml.dll Denial of Service Exploit Author : ajann Contact : : Tested : IE 6.0 XP SP2 DOS------------------------------------------------------ All Events, onclick,oneror,onmouseover,onload etc. Example: Save to .html file a a href=x onclick=ajann onclick=ajann...
CVE-2006-3383
Cross-site scripting XSS vulnerability in index.php in mAds 1.0 allows remote attackers to inject arbitrary web script or HTML via Javascript events such as onmouseover within a URL. NOTE: the provenance of this information is unknown; the details are obtained solely from third party reports...
CVE-2006-3383
CVE-2006-3383 is a cross-site scripting (XSS) vulnerability in the index.php file of mAds 1.0. The issue allows remote attackers to inject arbitrary web script or HTML by crafting a URL that triggers Javascript events (e.g., onmouseover). The NVD-derived vector indicates an attack with network ac...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in TextFileBB 1.0.16 allow remote attackers to inject arbitrary web script or HTML via Javascript events such as "onmouseover" in the 1 color, 2 size, or 3 url bbcode tags...
CVE-2006-2143
CVE-2006-2143 describes multiple XSS vulnerabilities in TextFileBB 1.0.16. The issue allows remote attackers to inject arbitrary JavaScript/HTML via onmouseover-based events in the (1) color, (2) size, or (3) url bbcode tags. Affected software: TextFileBB 1.0.16. Root cause: lack of proper input ...
CVE-2005-4357
Cross-site scripting XSS vulnerability in phpBB 2.0.18, when "Allowed HTML tags" is enabled, allows remote attackers to inject arbitrary Javascript via a permitted HTML tag with " quote characters and active attributes such as onmouseover...
CVE-2005-4357
Cross-site scripting XSS vulnerability in phpBB 2.0.18, when "Allowed HTML tags" is enabled, allows remote attackers to inject arbitrary Javascript via a permitted HTML tag with " quote characters and active attributes such as onmouseover...
CVE-2005-2138
CVE-2005-2138 describes a Cross-site Scripting (XSS) vulnerability in the Comdev eCommerce 3.0 and 3.1 product line, specifically in index.php. The flaw allows remote attackers to inject arbitrary web script or HTML by injecting Javascript into the onMouseOver event of an anchor tag in a review m...
CVE-2005-2042
Cross-site scripting XSS vulnerability in ajax-spell before 1.8 allows remote attackers to inject arbitrary web script or HTML via onmouseover or other events in HTML tags...
CVE-2005-1659
Cross-site scripting XSS vulnerability in filemanager.cpp in MyServer 0.8 allows remote attackers to inject arbitrary Javascript via a URL with a "..." triple dot followed by an onmouseover event...
CVE-2003-1136
Cross-site scripting XSS vulnerability in Chi Kien Uong Guestbook 1.51 allows remote attackers to inject arbitrary web script or HTML via 1 HTML in a posted message or 2 Javascript in an onmouseover attribute in an e-mail address or URL...