1229 matches found
CVE-2017-17694
Techno - Portfolio Management Panel through 2017-11-16 allows XSS via the panel/search.php s parameter...
CVE-2017-17695
Techno - Portfolio Management Panel through 2017-11-16 allows SQL Injection via the panel/search.php s parameter...
Design/Logic Flaw
Techno - Portfolio Management Panel through 2017-11-16 allows XSS via the panel/search.php s parameter...
CVE-2017-17695
Techno - Portfolio Management Panel through 2017-11-16 allows SQL Injection via the panel/search.php s parameter...
CVE-2017-5663
In Apache Fineract 0.4.0-incubating, 0.5.0-incubating, and 0.6.0-incubating, an authenticated user with client/loan/center/staff/group read permissions is able to inject malicious SQL into SELECT queries. The 'sqlSearch' parameter on a number of endpoints is not sanitized and appended directly to...
CVE-2017-17597
Nearbuy Clone Script 3.2 has SQL Injection via the categorylist.php search parameter...
CVE-2017-17597
Nearbuy Clone Script 3.2 has SQL Injection via the categorylist.php search parameter...
Sql injection
FS Trademe Clone 1.0 has SQL Injection via the searchitem.php search parameter or the generalitemdetails.php id parameter...
Sql injection
Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the singledetail.php sid parameter...
safirperfum.ir XSS vulnerability
Open Bug Bounty ID: OBB-417450 Description| Value ---|--- Affected Website:| safirperfum.ir Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
disneyfoodblog.com XSS vulnerability
Open Bug Bounty ID: OBB-372642 Description| Value ---|--- Affected Website:| disneyfoodblog.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
escoladatecnologia.com.br XSS vulnerability
Vulnerable URL:...
CVE-2017-15373
E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php aka the search private area...
CVE-2017-15373
E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php aka the search private area...
tvstoreonline.com XSS vulnerability
Open Bug Bounty ID: OBB-322079 Description| Value ---|--- Affected Website:| tvstoreonline.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
fermax.com XSS vulnerability
Vulnerable URL: https://www.fermax.com/portugal/corporate/motor-de-busca.html?search=%27%22%3E%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...
shop.bvb.de XSS vulnerability
Open Bug Bounty ID: OBB-311230 Description| Value ---|--- Affected Website:| shop.bvb.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
a8.fandal.cz XSS vulnerability
Vulnerable URL: http://a8.fandal.cz/search.php?search=stereo detailsx=x Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...
