1242 matches found
Social Directory Script SQL Injection Vulnerability
Social Directory Script is a website that helps users to quickly build a social directory, where they can create a list of their favorite websites and add their favorite websites to the list. Social Directory Script 2.0 suffers from SQL injection in several parameters such as search and category...
samsunbeyi.com XSS vulnerability
Vulnerable URL: http://samsunbeyi.com/?s="/alert/openbugbounty/...
SANADATA SanaCMS Cross-Site Scripting Vulnerability
SANADATA SanaCMS is a content management system CMS of SANADATA Company in Iran. A cross-site scripting vulnerability exists in the index.asp file in SANADATA SanaCMS version 7.3. The vulnerability can be exploited by a remote attacker to inject arbitrary web script or HTML using the 'search'...
CVE-2017-5882
Cross-site scripting XSS vulnerability in index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2017-5882
Cross-site scripting XSS vulnerability in index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2017-5882
Cross-site scripting XSS vulnerability in index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
Joomla JTAG Calendar 6.2.4 SQL Injection
Exploit Title: Joomla Component JTAG Calendar 6.2.4 - SQL Injection Date: 2017-1-28 Vender Home : https://extensions.joomla.org/extension/jtag-calendar/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home : http://persian-team.ir/ Tested on: Windows AND Linux Telegram Channel :...
Olive Blog vulnerable to cross-site scripting
Overview Olive Blog provided by Olive Design contains a cross-site scripting vulnerability CWE-79 due to a flaw in processing the search parameter. Ueki Shuya reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact ...
JVN#60879379: Olive Blog vulnerable to cross-site scripting
Olive Blog provided by Olive Design contains a cross-site scripting vulnerability CWE-79 due to a flaw in processing the search parameter. Impact An arbitrary script may be executed on the user's web browser. Solution Do not use Olive Blog Olive Blog is no longer being developed or maintained. It...
kmle.co.kr XSS vulnerability
Open Bug Bounty ID: OBB-199342 Description| Value ---|--- Affected Website:| kmle.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2016-9751
Cross-site scripting XSS vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2016-9751
Cross-site scripting XSS vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
experiencelife.com XSS vulnerability
Vulnerable URL: https://experiencelife.com/?s=%27%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 96373 VIP website...
CVE-2016-9282
SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database information via action=search&module=search with the searchstring parameter...
SQL Injection Vulnerability in Gobetter Video Conferencing System of Beijing Gobetter Technology Co.
Gobalt network video conferencing system supports a variety of application scenarios such as work meetings, remote training, product sales, online seminars, consulting services and so on. There is a SQL injection vulnerability in the searchparam parameter of Gobetter videoconferencing system of...
Dswjcms Loan.html search参数 SQL注入
No description provided by source...
fanevalley.co.uk XSS vulnerability
Vulnerable URL: https://www.fanevalley.co.uk/search.php?s=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7031651 Google...
UBUNTU-CVE-2016-2560
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.15, 4.4.x before 4.4.15.5, and 4.5.x before 4.5.5.1 allow remote attackers to inject arbitrary web script or HTML via 1 a crafted Host HTTP header, related to libraries/Config.class.php; 2 crafted JSON data, relat...