All Vulnerabilities for autodiscover.gca.gov.sa Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| autodiscover.gca.gov.sa ---|--- Open Bu...

CVE-2021-43689

manage last update Oct 24, 2017 is affected by a Cross Site Scripting XSS vulnerability in Application/Home/Controller/GoodsController.class.php. The exit function will terminate the script and print a message which have values from $POST...

Manage 跨站脚本漏洞

Manage is a simple login and registration system based on Vue-Cli and Thinkphp. A cross-site scripting vulnerability exists in manage, which stems from a cross-site scripting XSS vulnerability in Application/Home/Controller/GoodsController.class.php. The exit function will terminate the script an...

Path traversal

The File Download API in Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to read arbitrary files via absolute path traversal in the SearchString JSON field in /home/download POST data...

unemat.br Cross Site Scripting vulnerability OBB-2276478

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| unemat.br ---|--- Open Bug Bounty...

entptest.hud.gov Cross Site Scripting vulnerability OBB-2276254

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| entptest.hud.gov ---|--- Open Bug Bount...

WordPress 安全漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An authorization issue vulnerability exists in the WordPress Insert Pages plugin in versions prior to 3.7.0,...

njparentlink.nj.gov Cross Site Scripting vulnerability OBB-2271172

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| njparentlink.nj.gov ---|--- Open Bug...

CVE-2021-24575

The School Management System – WPSchoolPress WordPress plugin before 2.1.10 does not properly sanitize or use prepared statements before using POST variable in SQL queries, leading to SQL injection in multiple actions available to various authenticated users, from simple subscribers/students to...

kssst.kdor.ks.gov Cross Site Scripting vulnerability OBB-2228519

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| kssst.kdor.ks.gov ---|--- Open Bug Boun...

curitibanos.sc.gov.br Cross Site Scripting vulnerability OBB-2226637

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| curitibanos.sc.gov.br ---|--- Open Bug...

cunhatai.sc.gov.br Cross Site Scripting vulnerability OBB-2226640

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| cunhatai.sc.gov.br ---|--- Open Bug...

apiuna.sc.gov.br Cross Site Scripting vulnerability OBB-2226175

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| apiuna.sc.gov.br ---|--- Open Bug Bount...

lct.npn.faa.gov Cross Site Scripting vulnerability OBB-2219803

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| lct.npn.faa.gov ---|--- Open Bug Bounty...

entptest.hud.gov Cross Site Scripting vulnerability OBB-2210715

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| entptest.hud.gov ---|--- Open Bug Bount...

entptest.hud.gov Cross Site Scripting vulnerability OBB-2203091

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| entptest.hud.gov ---|--- Open Bug Bount...

All Vulnerabilities for koha.jgu.edu.in Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| koha.jgu.edu.in ---|--- Open Bug Bounty...

clct.franklincountyohio.gov Cross Site Scripting vulnerability OBB-2179832

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| clct.franklincountyohio.gov ---|--- Ope...

Cross-site Scripting (XSS) - Stored in opensourcepos/opensourcepos

Description Cross-Site Scripting XSS attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites. Proof of Concept // PoC.js 1-- Just got https://demo.opensourcepos.org/messages 2-- send a payload on number phone field . 3-- you will get an...

cityofrushville.in.gov Cross Site Scripting vulnerability OBB-2169366

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| cityofrushville.in.gov ---|--- Open Bug...