CVE-2017-17573

CVE-2017-17573 affects FS Ebay Clone 1.0, where SQL injection is possible via product.php?id and via search.php parameters category_id or sub_category_id. The root cause is improper handling of user-supplied input in those parameters, enabling attacker-controlled SQL commands. Documented impact i...

CVE-2017-17592: Improper Neutralization of Special Elements used in an SQL Command

Website Auction Marketplace 2.0.5 has SQL Injection via the search.php catid parameter...

PT-2017-14868

Name of the Vulnerable Software and Affected Versions FS Ebay Clone version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "product.php" endpoint, specifically through the id parameter, or the "search.php" endpoint through the category id or sub category id...

CVE-2017-17573: Improper Neutralization of Special Elements used in an SQL Command

FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php categoryid or subcategoryid parameter...

PT-2017-14887

Name of the Vulnerable Software and Affected Versions Website Auction Marketplace version 2.0.5 Description The issue is related to SQL Injection, which occurs via the cat id parameter in the "search.php" endpoint. Recommendations For version 2.0.5, avoid using the cat id parameter in the...

drirotors.com XSS vulnerability

Open Bug Bounty ID: OBB-452021 Description| Value ---|--- Affected Website:| drirotors.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

archileb.com XSS vulnerability

Open Bug Bounty ID: OBB-451739 Description| Value ---|--- Affected Website:| archileb.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

onehumor.com XSS vulnerability

Open Bug Bounty ID: OBB-451535 Description| Value ---|--- Affected Website:| onehumor.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

alaskarobotics.com XSS vulnerability

Open Bug Bounty ID: OBB-450932 Description| Value ---|--- Affected Website:| alaskarobotics.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

dynatone.ru XSS vulnerability

Open Bug Bounty ID: OBB-450278 Description| Value ---|--- Affected Website:| dynatone.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ok.gov XSS vulnerability

Open Bug Bounty ID: OBB-449242 Description| Value ---|--- Affected Website:| ok.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

russikona.ru XSS vulnerability

Open Bug Bounty ID: OBB-447921 Description| Value ---|--- Affected Website:| russikona.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

128xpultrasound.com XSS vulnerability

Open Bug Bounty ID: OBB-447922 Description| Value ---|--- Affected Website:| 128xpultrasound.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

art-directory.info XSS vulnerability

Open Bug Bounty ID: OBB-447109 Description| Value ---|--- Affected Website:| art-directory.info Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

run24.co.za XSS vulnerability

Open Bug Bounty ID: OBB-440989 Description| Value ---|--- Affected Website:| run24.co.za Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

stallionsonline.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-440972 Description| Value ---|--- Affected Website:| stallionsonline.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

99off.today XSS vulnerability

Open Bug Bounty ID: OBB-440731 Description| Value ---|--- Affected Website:| 99off.today Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

omni105.com XSS vulnerability

Open Bug Bounty ID: OBB-440626 Description| Value ---|--- Affected Website:| omni105.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

vsetv.by XSS vulnerability

Open Bug Bounty ID: OBB-440608 Description| Value ---|--- Affected Website:| vsetv.by Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

jesupcitizenherald.com XSS vulnerability

Open Bug Bounty ID: OBB-440501 Description| Value ---|--- Affected Website:| jesupcitizenherald.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...