Gratipay: Content Spoofing/Text Injection

Researcher @ahsantahir reported a content spoofing on the search functionality. The search query was displayed in the page, but without any prefix. We added "Results for:", so nobody can be misinformed. This has been fixed in the last version and the fix is now deployed. Thanks for making Gratipa...

90minut.pl XSS vulnerability

Vulnerable URL: http://www.90minut.pl/szukaj.php?tekst=Legia%25...

ruilen.nl XSS vulnerability

Vulnerable URL: https://www.ruilen.nl/advertenties/zoeken.php?list=1=0==" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1837734 VIP website status:| No Check ruilen.nl SSL...

wikimapia.org XSS vulnerability

Vulnerable URL: http://wikimapia.org/search/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3199 VIP website status:| Yes Check wikimapia.org SSL connection:| Grade: F Coordinated...

stappenvzw.be XSS vulnerability

Vulnerable URL: http://www.stappenvzw.be/zoeken.php?searchstring=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7147309 VIP website status:| No Check stappenvzw.be SSL connection...

CodoForum 3.4 - Persistent Cross-Site Scripting

CodoForum 3.4 - Persistent Cross-Site Scripting Exploit Title: Codoforum v3.4 Stored Cross-Site Scripting Stored XSS Google Dork: intext:"powered by codoforum" Date: 01/06/2016 Exploit Author: Ahmed Sherif OffensiveBits Vendor Homepage: http://codologic.com/page/ Software Link:...

beiker.es XSS vulnerability

Vulnerable URL: http://www.beiker.es/es/search/searchresults?key=...

charles-rema.fr XSS vulnerability

Vulnerable URL: http://www.charles-rema.fr/recherche-index?t=''"/alert"openbugbounty"...

ville-coueron.fr XSS vulnerability

Vulnerable URL: http://www.ville-coueron.fr/recherche.html?q='"/alert"openbugbounty"...

knightfrank.com XSS vulnerability

Vulnerable URL: http://www.knightfrank.com/search?query=...

tatahousing.in XSS vulnerability

Vulnerable URL: http://tatahousing.in/search.php?action=06a943c59f33a34bb5924aaf72cd2995=%22%3E%3Cscript%3Efor%20%28;;%29%20alert%28document.domain%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:|...

ubuy.com.tr XSS vulnerability

Vulnerable URL: https://www.ubuy.com.tr/tr/search/?cat=name=="/alert/openbugbounty/...

central-lab.tabrizu.ac.ir XSS vulnerability

Vulnerable URL: http://central-lab.tabrizu.ac.ir/fa/search/index.html?SearchFolderName=contents=ResultView=zzz"...

The "Restrict to articles with labels" option doesn't restrict the customer portal from suggesting KB's other than those with the nominated Label

h3. Summary Currently we have the "Restrict to articles with labels", where you can specify the label for a request. When a customer is filling the summary for a request, SD will search the knowledge base for similar content from confluence pages with that label. However, the customer portal sear...

west8.nl XSS vulnerability

Vulnerable URL: http://west8.nl/search/?s=?q="/alert/xssposed/...

bufvc.ac.uk XSS vulnerability

Vulnerable URL: http://bufvc.ac.uk/allbufvc/search.php?q=...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component (CNVD-2016-02558)

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle.PeopleSoft Enterprise HCM Candidate Gateway is a self-service front-end to the Oracle PeopleSoft Enterprise Recruiting solution component. An unspecified vulnerability in the PIA Search Functionality...

Code injection

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to PIA Search Functionality...

CVE-2016-3417

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to PIA Search Functionality...

CVE-2016-3417

CVE-2016-3417 affects Oracle PeopleSoft Products (PeopleSoft Enterprise PeopleTools) versions 8.53–8.55, specifically the PIA Search Functionality subcomponent. The vulnerability is described as unspecified and enables remote authenticated users to affect confidentiality and integrity via PIA Sea...