5 matches found
leuze.com XSS vulnerability
Vulnerable URL: http://www.leuze.com/en/deutschland/produkte/produktefuerdiearbeitssicherheit/sicherezuhaltungenschalterundnaeherungssensoren/magnetcodiertesensoren/mc33/selector.php?supplieraid=%22%3E%3C/title%3E%27%3E;%3C/script%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3Eid=A1-3-2-4-1〈=eng Details:...
PT-2017-16731
Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.4.1 Description A blind SQL injection issue allows un-authenticated users to exploit the system via an HTTP GET request. This can be used to dump database data to a malicious server using out-of-band techniques, such as...
WP Socializer 2.4.2 - admin/wpsr-services-selector.php val Parameter XSS
The WP Socializer – Simple & Easy Social Media Share Icons WordPress plugin was affected by an admin/wpsr-services-selector.php val Parameter XSS security vulnerability...
PT-2013-5474
Name of the Vulnerable Software and Affected Versions Serendipity versions 1.6.2 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the serendipityhtmltarget parameter in the serendipity admin image selector.php file...
PT-2012-3957
Name of the Vulnerable Software and Affected Versions Serendipity versions prior to 1.6.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the serendipitytextarea parameter in the serendipity admin image selector.php file. This issue...