PT-2017-18125

Name of the Vulnerable Software and Affected Versions MODX Revolution version 2.5.7 Description The issue allows remote attackers to obtain system directory information due to directory traversal in the setup/processors/url search.php file, also known as the search page of an unused processor...

zoomed.com XSS vulnerability

Vulnerable URL: http://www.zoomed.com/db/products/Search.php?DatabaseID=2=aviansun=3KNOXSS Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 498054 VIP website status:| No Check...

ics.jobs XSS vulnerability

Vulnerable URL: http://www.ics.jobs/search.php?search="'--!=on=on=on=on==to==0==44=9 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7358488 VIP website status:| No Check ics.jobs S...

CVE-2016-4847

Cross-site scripting XSS vulnerability in site/search.php in OSSEC Web UI before 0.9 allows remote attackers to inject arbitrary web script or HTML by leveraging an unanchored regex...

CVE-2016-4847

Cross-site scripting XSS vulnerability in site/search.php in OSSEC Web UI before 0.9 allows remote attackers to inject arbitrary web script or HTML by leveraging an unanchored regex...

PT-2017-8549

Name of the Vulnerable Software and Affected Versions OSSEC Web UI versions prior to 0.9 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML. The vulnerability is due to an unanchored regex...

CVE-2016-4847: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in site/search.php in OSSEC Web UI before 0.9 allows remote attackers to inject arbitrary web script or HTML by leveraging an unanchored regex...

dfcommunity.net XSS vulnerability

Vulnerable URL: http://www.dfcommunity.net/main/bbs/search.php?stx=mortal kombat...

remixclub.in XSS vulnerability

Open Bug Bounty ID: OBB-224407 Description| Value ---|--- Affected Website:| remixclub.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

publicate.com.ve XSS vulnerability

Open Bug Bounty ID: OBB-223243 Description| Value ---|--- Affected Website:| publicate.com.ve Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

besseytools.com XSS vulnerability

Vulnerable URL: https://www.besseytools.com/en/search.php?Keywords=testKNOXSS Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1632572 VIP website status:| No Check besseytools.com S...

bessey.de XSS vulnerability

Vulnerable URL: http://www.bessey.de/en/search.php?Search=sdsd"'--!confirmOPENBUGBOUNTY...

friendshipbaptist411.org XSS vulnerability

Vulnerable URL: http://friendshipbaptist411.org/search.php?pageID=search=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

mediaboxes.xyz XSS vulnerability

Vulnerable URL: http://mediaboxes.xyz/search.php?querry=recharge"--!" Details: Description| Value ---|--- Patched:| Yes, at 23.04.2017 Latest check for patch:| 23.04.2017 19:00 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7001524 VIP website status:| No Check...

stofflexikon.com XSS vulnerability

Vulnerable URL: http://www.stofflexikon.com/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2504973 VIP website status:| No Check stofflexikon.com SSL connection:| Grade:...

cimolai.com XSS vulnerability

Vulnerable URL: http://www.cimolai.com/search.php?s=sd'"--!confirmOPENBUGBOUNTY...

CVE-2017-7204

A Cross-Site Scripting XSS was discovered in imdbphp 5.1.1. The vulnerability exists due to insufficient filtration of user-supplied data name passed to the "imdbphp-master/demo/search.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

CVE-2017-7204: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS was discovered in imdbphp 5.1.1. The vulnerability exists due to insufficient filtration of user-supplied data name passed to the "imdbphp-master/demo/search.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

PT-2017-17573

Name of the Vulnerable Software and Affected Versions imdbphp version 5.1.1 Description A Cross-Site Scripting issue was discovered due to insufficient filtration of user-supplied data, specifically the name variable, passed to the "imdbphp-master/demo/search.php" API endpoint. This allows an...

laminex.com.au XSS vulnerability

Vulnerable URL: http://www.laminex.com.au/search.php?search=%22%3E%3C/title%3E%27%3E;%3C/script%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 15:41 GMT Vulnerability type:| XSS Vulnerability status:|...