windsorfuelco.com XSS vulnerability

Open Bug Bounty ID: OBB-550379 Description| Value ---|--- Affected Website:| windsorfuelco.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kanjiw.tk XSS vulnerability

Open Bug Bounty ID: OBB-548434 Description| Value ---|--- Affected Website:| kanjiw.tk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nussreiner.de XSS vulnerability

Open Bug Bounty ID: OBB-548031 Description| Value ---|--- Affected Website:| nussreiner.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

rebatemango.com XSS vulnerability

Open Bug Bounty ID: OBB-547907 Description| Value ---|--- Affected Website:| rebatemango.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

es.tvsubtitles.net XSS vulnerability

Open Bug Bounty ID: OBB-544810 Description| Value ---|--- Affected Website:| es.tvsubtitles.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-17272

Name of the Vulnerable Software and Affected Versions: Easy Car Script 2014 Description: The issue exists due to SQL Injection in the s order or s row parameter to the "site search.php" endpoint. Recommendations: For Easy Car Script 2014, avoid using the s order or s row parameters in the "site...

lipacitycolleges.edu.ph XSS vulnerability

Open Bug Bounty ID: OBB-522718 Description| Value ---|--- Affected Website:| lipacitycolleges.edu.ph Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

persianfal.com XSS vulnerability

Open Bug Bounty ID: OBB-512246 Description| Value ---|--- Affected Website:| persianfal.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

vivasunsports.com XSS vulnerability

Open Bug Bounty ID: OBB-472645 Description| Value ---|--- Affected Website:| vivasunsports.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

frescogourmetcoffee.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-472510 Description| Value ---|--- Affected Website:| frescogourmetcoffee.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

shoppingclub.pk XSS vulnerability

Open Bug Bounty ID: OBB-467554 Description| Value ---|--- Affected Website:| shoppingclub.pk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

jencea.com.tw XSS vulnerability

Open Bug Bounty ID: OBB-467327 Description| Value ---|--- Affected Website:| jencea.com.tw Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

electronica.mexicored.com.mx XSS vulnerability

Open Bug Bounty ID: OBB-466659 Description| Value ---|--- Affected Website:| electronica.mexicored.com.mx Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

aditivosparapolimeros.mexicored.com.mx XSS vulnerability

Open Bug Bounty ID: OBB-457808 Description| Value ---|--- Affected Website:| aditivosparapolimeros.mexicored.com.mx Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP...

abasolo.mexicored.com.mx XSS vulnerability

Open Bug Bounty ID: OBB-454118 Description| Value ---|--- Affected Website:| abasolo.mexicored.com.mx Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventio...

CVE-2017-17695

Techno - Portfolio Management Panel through 2017-11-16 allows SQL Injection via the panel/search.php s parameter...

CVE-2017-17696

Techno - Portfolio Management Panel through 2017-11-16 allows full path disclosure via an invalid s parameter to panel/search.php...

CVE-2017-17694

Techno - Portfolio Management Panel through 2017-11-16 allows XSS via the panel/search.php s parameter...

CVE-2017-17695

The CVE concerns Techno - Portfolio Management Panel with a SQL Injection vulnerability in the panel/search.php s parameter (affecting versions up to 2017-11-16). The CNVD entry explicitly describes a remote attacker manipulating the s parameter to execute SQL commands and potentially disclose da...

CVE-2017-17696: Exposure of Sensitive Information to an Unauthorized Actor

Techno - Portfolio Management Panel through 2017-11-16 allows full path disclosure via an invalid s parameter to panel/search.php...