Cross-Site Scripting Vulnerability in DotCMS Blog Search Page

DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A cross-site scripting vulnerability exists in DotCMS version 3.3, which originates from the blogs/ page in the...

outfitter.de XSS vulnerability

Vulnerable URL: https://www.outfitter.de/index.php?lang=0=search=z.B.+Marke,+Produkt+oder+Artikelnummer= Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:58 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

PHPBack 1.1 Cross Site Scripting

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/PHPBACK-XSS.txt Vendor: ==================== www.phpback.org Product: =============== phpback v1.1 The open source feedback system, PHPBack is feedback a web application that you can easily...

PHPBack 1.1 Cross Site Scripting Vulnerability

PHPBack version 1.1 suffers from a cross site scripting vulnerability. PHPBack 1.1 Cross Site Scripting Vulnerability Vendor: ==================== www.phpback.org Product: =============== phpback v1.1 The open source feedback system, PHPBack is feedback a web application that you can easily...

WordPress Email Newsletter Plugin <= 20.13.6 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Vulnerable parameter is "search". Solution Update the plugin...

LiteCart 1.3.2 Cross Site Scripting Vulnerability

LiteCart version 1.3.2 suffers from a cross site scripting vulnerability. 1. Introduction Affected Product: LiteCart 1.3.2 Fixed in: 1.3.3 Fixed Version Link: https://www.litecart.net/downloading?version=1.3.3.1 Vendor Contact: email protected Vulnerability Type: XSS Remote Exploitable: Yes...

lagulu.com XSS vulnerability

Vulnerable URL: http://lagulu.com/?s=alert'XSSPOSED'...

lifeproof.com XSS vulnerability

Vulnerable URL: https://www.lifeproof.com/en-us/search?q=--...

designlovefest.com XSS vulnerability

Open Bug Bounty ID: OBB-81031 Description| Value ---|--- Affected Website:| designlovefest.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

SEO Redirection < 2.9 - Authenticated Reflected Cross-Site Scripting (XSS)

The plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability in its settings page, via the search GET parameter PoC https://example.com/wp-admin/options-general.php?page=seo-redirection.php=posts=%22+onmouseover%3Dalert%281%29+%3E...

store.acousticsounds.com XSS vulnerability

Vulnerable URL: http://store.acousticsounds.com/index.cfm?get=results='"...

Sql injection

SQL injection vulnerability in LivelyCart 1.2.0 allows remote attackers to execute arbitrary SQL commands via the searchquery parameter to product/search...

Lively cart SQL Injection Vulnerability

Exploit for multiple platform in category web applications Exploit Title : Lively cart SQL Injection vulnerability Author : Manish Kishan Tanwar AKA error1046 Vendor Link : http://codecanyon.net/item/livelycart-a-jquery-php-store-shop/5531393 Date : 18/06/2015 Love to : zero cool,Team...

Lively Cart - SQL Injection

Lively Cart - SQL Injection Exploit Title : Lively cart SQL Injection vulnerability Author : Manish Kishan Tanwar AKA error1046 Vendor Link : http://codecanyon.net/item/livelycart-a-jquery-php-store-shop/5531393 Date : 18/06/2015 Love to : zero cool,Team indishell,Mannu,Viki,Hardeep...

australia-businessdirectory.com XSS vulnerability

Open Bug Bounty ID: OBB-62219 Description| Value ---|--- Affected Website:| australia-businessdirectory.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

michaels.com XSS vulnerability

Vulnerable URL: http://www.michaels.com/search?q=javascript:alert/XSSPOSED/...

CVE-2010-5322

Cross-site scripting XSS vulnerability in ZeusCart 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action to index.php...

CVE-2010-5322

Cross-site scripting XSS vulnerability in ZeusCart 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action to index.php...

NPDS Revolution SQL Injection Vulnerability

NPDS Revolution is a content and community management system CMS. The system supports search engine optimization, group and workspace management, multiple themes, and more. A SQL injection vulnerability exists in the search.php script in NPDS Revolution version 13. A remote attacker can exploit...

ManageEngine ServiceDesk Plus 'search' Parameter User Enumeration Vulnerability

ServiceDesk Plus is web-based helpdesk software that helps users manage all their communications from a single point. A user enumeration vulnerability exists in the ManageEngine ServiceDesk Plus 'search' parameter, which can be exploited by an attacker to obtain a valid user account via a brute...