cantogravura.com.br Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1118494 Security Researcher haxmov Helped patch 708 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting cantogravura.com.br website a...

goodtires.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1118487 Security Researcher foulenzer Helped patch 132 vulnerabilities Received 3 Coordinated Disclosure badges Received 1 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting goodtires.de website and i...

rongmotamhon.net Cross Site Scripting vulnerability

Security Researcher g0bl1nsec Helped patch 3596 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting rongmotamhon.net website and its users. Following...

adai.pt Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1118034 Security Researcher Gh05tPT Helped patch 6890 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting adai.pt website and its...

ac-g.ru Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8594 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting ac-g.ru website and its users. Following coordinated and...

1kdigital.com Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8574 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting 1kdigital.com website and its users. Following coordinated...

impalasite.org Cross Site Scripting vulnerability

Security Researcher g0bl1nsec Helped patch 3691 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting impalasite.org website and its users. Following coordinat...

cheap-web-space-zm.bitpalast.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1117435 Security Researcher raviakp1004 Helped patch 667 vulnerabilities Received 4 Coordinated Disclosure badges Received 5 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

cambridge-exams.ch Cross Site Scripting vulnerability

Security Researcher raviakp1004 Helped patch 531 vulnerabilities Received 4 Coordinated Disclosure badges Received 4 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting cambridge-exams.ch website and its users. Following...

PT-2020-11968 · WordPress · Popup Builder

Name of the Vulnerable Software and Affected Versions: popup-builder plugin versions prior to 3.64.1 Description: The issue allows information disclosure and settings modification, leading to in-scope privilege escalation via admin-post actions to com/classes/Actions.php. By sending a POST reques...

pro-m-edia.com Improper Access Control vulnerability

Security Researcher geeknik Helped patch 8635 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting pro-m-edia.com website and its users. Following coordinate...

jogos.clickgratis.com.br Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1116529 Security Researcher Broly157 Helped patch 1593 vulnerabilities Received 7 Coordinated Disclosure badges Received 15 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting jogos.clickgratis.com.br...

PT-2020-12086 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited in admin/kb-backup.php by adding a question mark ? followed...

PT-2020-12113 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns how URIs are handled in admin/header.php, allowing for Reflected XSS in admin/report-article-printed.php. This can be achieved by adding a question mark ? followed...

PT-2020-12147 · Chadha · Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to inject arbitrary web script or HTML via the sort parameter in the admin/manage-news.php file. This can lead to reflected XSS attacks. Recommendations: F...

PT-2020-12156 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to delete a comment via a crafted request, specifically through a CSRF vulnerability in the admin/manage-comments.php file. This enables attackers to perfo...

PT-2020-12153 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to post a comment on any article via a crafted request to the admin/ajax-hub.php endpoint. This is made possible by a CSRF weakness. Recommendations: For...

PT-2020-12057 · Chadha · Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows remote attackers to download files from the server using a dot-dot-slash sequence ../ via the file parameter in the "admin/download.php" endpoint. Recommendations: F...

PT-2020-12115 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns how URIs are handled in admin/header.php, allowing for Reflected XSS in admin/report-article.php. This can be achieved by adding a question mark ? followed by the...

PT-2020-12168 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to edit a category, given the id, via a crafted request to the "admin/edit-category.php" endpoint. This is made possible by a CSRF weakness in the software...