3 matches found
ded.abudhabi.ae XSS vulnerability
Vulnerable URL: https://ded.abudhabi.ae/UserControls/SendToFriend/SendToFriend.aspx?lan=en=/en/studies-indicators/field-surveys-bank=%22%3E%3C/title%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerabili...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in cpCommerce before 1.2.4 allow remote attackers to inject arbitrary web script or HTML via 1 the search parameter in a search.quick action to search.php and 2 the name parameter in a sendtofriend action to sendtofriend.php...
CVE-2008-4121
Multiple cross-site scripting XSS vulnerabilities in cpCommerce before 1.2.4 allow remote attackers to inject arbitrary web script or HTML via 1 the search parameter in a search.quick action to search.php and 2 the name parameter in a sendtofriend action to sendtofriend.php...