bmrparts.com XSS vulnerability

Vulnerable URL: http://www.bmrparts.com/usedbmwengines.html!prettyPhoto/0,%3Cimg%20src=x%20onerror=alert%28/XSSPOSED/%29%3E/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 540979...

openairpleasures.com XSS vulnerability

Vulnerable URL: http://openairpleasures.com/search/?searchField=anal%3C/div%3E%3Cvideo/poster/onerror=alert%28%27XSSposed%27%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...

bbs.edu.rs XSS vulnerability

Vulnerable URL: http://www.bbs.edu.rs/frmOprofesoru.aspx?PID=69!prettyPhoto/0,%3Cimg%20src=x%20onerror=alert%28/XSSPOSED/%29%3E/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7198...

ganjanesardam.org XSS vulnerability

Vulnerable URL: http://www.ganjanesardam.org/search.html?search=%3CSCRIPT%3Ealert%28%27XSSPOSED%27%29%3B%3C%2FSCRIPT%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

bancoagricola.com XSS vulnerability

Vulnerable URL: http://bancoagricola.com/busqueda/article/busqueda.htm?search=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 21:17 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

otto99.awardspace.com XSS vulnerability

Open Bug Bounty ID: OBB-57671 Description| Value ---|--- Affected Website:| otto99.awardspace.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

NoNumber Framework Joomla! Plugin Multiple Vulnerabilities

No description provided by source. Exploit Title: NoNumber Framework Joomla! Plugin Multiple Vulnerabilities Discovery Date: 10 October 2011 Reported Date: 11 October 2011 Patch Date: 17 October 2011 Release Date: 17 October 2011 Author: jdc Software Link: http://nonumber.nl The nnframework plugi...

CVE-2012-1195

creationtimestamp| type| source ---|---|--- 2012-03-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18622 2012-04-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18714 2018-05-29 15:50:33+00:00| seen|...

Joomla NoNumber Framework Local File Inclusion / Shell Upload

Exploit Title: NoNumber Framework Joomla! Plugin Multiple Vulnerabilities Discovery Date: 10 October 2011 Reported Date: 11 October 2011 Patch Date: 17 October 2011 Release Date: 17 October 2011 Author: jdc Software Link: http://nonumber.nl The nnframework plugin by NoNumber! contains multiple...

CVE-2009-0172

creationtimestamp| type| source ---|---|--- 2009-04-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8344...

Unfixed XSS vulnerability at www.greenspace.co.za

Security researcher Overhead, has submitted on 03/09/2009 a cross-site-scripting XSS vulnerability affecting www.greenspace.co.za, which at the time of submission ranked 4338361 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is...

w3blabor CMS 3.3.0 - Authentication Bypass

w3blabor CMS 3.3.0 - Authentication Bypass '/ -.- ------------------oOO------OOo----------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Research Division // 2oo8 | -------------------------------------------------- | w3blabor...

w3blabor CMS 3.0.5 - Arbitrary File Upload Local File Inclusion

w3blabor CMS 3.0.5 - Arbitrary File Upload Local File Inclusion !/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwPOST; use Getopt::Long; '/ -.- ------------------oOO------OOo----------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/,...

CVE-2008-5591

creationtimestamp| type| source ---|---|--- 2008-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7351...

CVE-2008-7062

creationtimestamp| type| source ---|---|--- 2008-11-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7233...

CVE-2008-6302

creationtimestamp| type| source ---|---|--- 2008-11-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7106...

Unfixed XSS vulnerability at www.rom.on.ca

Security researcher austinator, has submitted on 15/08/2008 a cross-site-scripting XSS vulnerability affecting www.rom.on.ca, which at the time of submission ranked 191693 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/08/2008. It is...

PHP ZLink 'go.php' SQL注入漏洞

PHP ZLink是一款基于PHP的WEB应用程序。 PHP ZLink不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于'go.php'脚本对用户提交的WEB参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Zeak.net PHP ZLink 0.3 目前没有解决方案提供： http://www.zeak.net/ !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV3 print "\n \'/...

Unfixed XSS vulnerability at www.eurostarjewelry.com

Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting www.eurostarjewelry.com, which at the time of submission ranked 333098 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2007. It is...