EP Web Solutions CMS - Cross Site Scripting Detection

Cross-site scripting is an attack in which an attacker injects malicious executable scripts into the code of a trusted application or website. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-site scripting is an attack in which an attacker injects malicious executable scripts into the code of...

WordPress Flow-Flow Social Stream <=3.0.71 - Cross-Site Scripting Detection

WordPress Flow-Flow Social Stream 3.0.7.1 and prior is vulnerable to cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Flow-Flow Social Stream 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Global Domains International - Cross-Site Scripting Detection

Sites hosted by Global Domains International, Inc. have cross-site scripting and directory traversal vulnerabilities. !/usr/bin/env python3 -- coding: utf-8 -- """Sites hosted by Global Domains International, Inc.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient cla...

Senayan Library Management System v9.5.2 (Bulian) - Cross-Site Scripting Detection

SLiMS 9.5.2 Bulian vulnerable to Cross-Site Scripting in index.php. When injected, website will execute the payload repeatedly !/usr/bin/env python3 -- coding: utf-8 -- """SLiMS 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

KafDrop - Cross-Site Scripting Detection

KafDrop contains a cross-site scripting vulnerability. It allows remote unauthenticated attackers to inject arbitrary HTML and/or JavaScript into the response returned by the server. !/usr/bin/env python3 -- coding: utf-8 -- """KafDrop contains a cross-site scripting vulnerability.""" from...

XWiki - Cross-Site Scripting Detection

XWiki is vulnerable to reflected Cross-Site Scripting XSS via the viewer=changes endpoint. The rev2 parameter is not properly sanitised before being rendered in the response, allowing an attacker to inject arbitrary JavaScript. Affects XWiki versions prior to the patched release. !/usr/bin/env...

Discourse - Cross-Site Scripting Detection

Discourse contains a cross-site scripting vulnerability. An attacker can execute arbitrary script and thus steal cookie-based authentication credentials and launch other attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Discourse contains a cross-site scripting vulnerability.""" from...

SHOOWBIZ - Cross Site Scripting Detection

Cross-Site Scripting, is a type of security vulnerability commonly found in web applications. It occurs when an attacker injects malicious scripts typically written in JavaScript into web pages viewed by other users. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-Site Scripting, is a type of...

PMB v7.4.1 - Cross Site Scripting Detection

PMB v7.4.1 allow attacker to inject arbitrary malicious HTML or Javascripts code in user web browser via nosearch parameter !/usr/bin/env python3 -- coding: utf-8 -- """PMB v7.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Microweber <1.3.2 - Cross-Site Scripting Detection

Code Injection in on search.php?keywords= GitHub repository microweber/microweber prior to 1.3.2. !/usr/bin/env python3 -- coding: utf-8 -- """Code Injection in on search.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name...

CandidATS 3.0.0 - Cross-Site Scripting. Detection

CandidATS 3.0.0 contains a cross-site scripting vulnerability via the sortBy parameter of the ajax.php resource. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

OURPHP <= 7.2.0 - Cross Site Scripting Detection

OURPHP = 7.2.0 is vulnerale to Cross Site Scripting XSS via /client/manage/ourphpout.php. !/usr/bin/env python3 -- coding: utf-8 -- """OURPHP = 7.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OURPHP = 7.2.0 - Cros...

ServiceNow - Cross-Site Scripting Detection

ServiceNow through San Diego Patch 4b and Patch 6 contains a cross-site scripting vulnerability in the logout functionality, which can enable an unauthenticated remote attacker to execute arbitrary JavaScript. !/usr/bin/env python3 -- coding: utf-8 -- """ServiceNow through San Diego Patch 4b and...

CandidATS 3.0.0 - Cross-Site Scripting. Detection

CandidATS 3.0.0 contains a cross-site scripting vulnerability via the indexFile parameter of the ajax.php resource. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

cPanel < 11.109.9999.116 - Cross-Site Scripting Detection

An issue was discovered in cPanel before 11.109.9999.116. Cross Site Scripting can occur on the cpsrvd error page via an invalid webcall ID. !/usr/bin/env python3 -- coding: utf-8 -- """An issue was discovered in cPanel before 11.""" from kittysploit import from lib.protocols.http.httpclient impo...

OURPHP <= 7.2.0 - Cross Site Scripting Detection

OURPHP = 7.2.0 is vulnerable to Cross Site Scripting XSS via /client/manage/ourphptz.php. !/usr/bin/env python3 -- coding: utf-8 -- """OURPHP = 7.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'OURPHP = 7.2.0 - Cros...

mooDating 1.2 - Cross-site scripting Detection

A vulnerability, which was classified as problematic, was found in mooSocial mooDating 1.2. Affected is an unknown function of the file /find-a-match of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. !/usr/bin/env python3 -...

WordPress AJAX Random Post <=2.00 - Cross-Site Scripting Detection

WordPress AJAX Random Post 2.00 is vulnerable to reflected cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress AJAX Random Post 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress AJ...

WordPress e-search <=1.0 - Cross-Site Scripting Detection

WordPress e-search 1.0 and before contains a reflected cross-site scripting vulnerability via titleaz.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting Detection

WordPress HDW Video Gallery 1.2 and before contains a cross-site scripting vulnerability via playlist.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...