cheap-web-space-zm.bitpalast.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1117435 Security Researcher raviakp1004 Helped patch 667 vulnerabilities Received 4 Coordinated Disclosure badges Received 5 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

cambridge-exams.ch Cross Site Scripting vulnerability

Security Researcher raviakp1004 Helped patch 531 vulnerabilities Received 4 Coordinated Disclosure badges Received 4 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting cambridge-exams.ch website and its users. Following...

PT-2020-11968 · WordPress · Popup Builder

Name of the Vulnerable Software and Affected Versions: popup-builder plugin versions prior to 3.64.1 Description: The issue allows information disclosure and settings modification, leading to in-scope privilege escalation via admin-post actions to com/classes/Actions.php. By sending a POST reques...

pro-m-edia.com Improper Access Control vulnerability

Security Researcher geeknik Helped patch 8635 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting pro-m-edia.com website and its users. Following coordinate...

jogos.clickgratis.com.br Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1116529 Security Researcher Broly157 Helped patch 1593 vulnerabilities Received 7 Coordinated Disclosure badges Received 15 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting jogos.clickgratis.com.br...

PT-2020-12153 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to post a comment on any article via a crafted request to the admin/ajax-hub.php endpoint. This is made possible by a CSRF weakness. Recommendations: For...

PT-2020-12147 · Chadha · Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to inject arbitrary web script or HTML via the sort parameter in the admin/manage-news.php file. This can lead to reflected XSS attacks. Recommendations: F...

PT-2020-12086 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited in admin/kb-backup.php by adding a question mark ? followed...

PT-2020-12113 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns how URIs are handled in admin/header.php, allowing for Reflected XSS in admin/report-article-printed.php. This can be achieved by adding a question mark ? followed...

PT-2020-12156 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to delete a comment via a crafted request, specifically through a CSRF vulnerability in the admin/manage-comments.php file. This enables attackers to perfo...

PT-2020-12084 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited by injecting arbitrary web script or HTML in...

PT-2020-12174 · Chadha · Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to edit a comment by providing the id via a crafted request to the 'admin/edit-comments.php' endpoint. This is possible due to a CSRF weakness...

PT-2020-12154 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to create a custom field via a crafted request, specifically through the admin/add-field.php file. This is made possible by a CSRF weakness. Recommendation...

PT-2020-12128 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to delete any folder on the web server, potentially causing a Denial of Service. This is achieved by using a dot-dot-slash sequence ../ via the crdir...

PT-2020-12173 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to disapprove any comment by providing the id via a crafted request to the 'admin/manage-comments.php' endpoint. Recommendations: For version 9, consider...

PT-2020-12159 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to delete a ticket via a crafted request to the "admin/manage-tickets.php" endpoint. This is made possible by a CSRF weakness. Recommendations: For Chadha...

PT-2020-12057 · Chadha · Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows remote attackers to download files from the server using a dot-dot-slash sequence ../ via the file parameter in the "admin/download.php" endpoint. Recommendations: F...

PT-2020-12168 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to edit a category, given the id, via a crafted request to the "admin/edit-category.php" endpoint. This is made possible by a CSRF weakness in the software...

PT-2020-12115 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns how URIs are handled in admin/header.php, allowing for Reflected XSS in admin/report-article.php. This can be achieved by adding a question mark ? followed by the...

PT-2020-12166 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to edit an article, given the id, via a crafted request to the "admin/edit-article.php" endpoint. This is made possible by a CSRF weakness. Recommendations...