Path traversal

An issue was discovered in Softing uaGate SI 1.60.01. A maintenance script, that is executable via sudo, is vulnerable to file path injection. This enables the Attacker to write files with superuser privileges in specific locations...

CVE-2019-11526

Softing uaGate SI 1.60.01 contains a privilege-elevation issue in its maintenance script that runs via sudo. The maintenance script is vulnerable to file path injection, allowing an attacker to write files with superuser privileges in specific locations. This CVE (CVE-2019-11526) is documented ac...

CVE-2019-11526

An issue was discovered in Softing uaGate SI 1.60.01. A maintenance script, that is executable via sudo, is vulnerable to file path injection. This enables the Attacker to write files with superuser privileges in specific locations...

The vulnerability of the SiTex component: The accessible environment of the SiTex tooling development platform allows a attacker to execute arbitrary requests to the database.

The vulnerability of the distributed application development platform SiTex-Dostupnye Sredstvo exists due to the lack of measures to neutralize special elements used in SQL queries. Exploiting this vulnerability allows a malicious actor to execute any query against the database using a specially...

SQL Injection Vulnerability in the Web Management System si***.php of Qingdao Shangzhixin Network Technology Co.

Qingdao Shangzhixin Network Technology Co., Ltd. is a company engaged in e-commerce, website production and maintenance and database development. A SQL injection vulnerability exists in the website management system si.php of Qingdao Shangzhixin Network Technology Co., Ltd, which can be exploited...

SQL Injection Vulnerability in PHPMyWind si***_up***.php File

PHPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . A SQL injection vulnerability exists in the PHPMyWind siup.php file. An attacker can exploit this vulnerability to obtain sensitive database information...

tomassport2.si XSS vulnerability

Open Bug Bounty ID: OBB-684764 Description| Value ---|--- Affected Website:| tomassport2.si Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

si-shk.de XSS vulnerability

Open Bug Bounty ID: OBB-681048 Description| Value ---|--- Affected Website:| si-shk.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

epson.si XSS vulnerability

Open Bug Bounty ID: OBB-665253 Description| Value ---|--- Affected Website:| epson.si Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

si-tech.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-650614 Description| Value ---|--- Affected Website:| si-tech.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

si-tech.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-571616 Description| Value ---|--- Affected Website:| si-tech.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Input validation

Some Huawei smart phones with software of NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386SP01, NTS-AL00C00B535 have a DoS vulnerability due to insufficient input validation. An unauthenticated attacker could send malformed System InformationSI messages to the smart phone within...

agroit.li.fri.uni-lj.si XSS vulnerability

Open Bug Bounty ID: OBB-453939 Description| Value ---|--- Affected Website:| agroit.li.fri.uni-lj.si Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

alyasabr.com XSS vulnerability

Open Bug Bounty ID: OBB-347712 Description| Value ---|--- Affected Website:| alyasabr.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

casamayor-realestate.com XSS vulnerability

Vulnerable URL: http://www.casamayor-realestate.com/si/index.php?seccion="'--!...

si-tech.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-273239 Description| Value ---|--- Affected Website:| si-tech.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

blog.bosch-si.com XSS vulnerability

Vulnerable URL: http://blog.bosch-si.com/categories?s=xss%3Cscript%3Ealert%27OPENBUGBOUNTY%27;%3C/script%3E& Details: Description| Value ---|--- Patched:| Yes, at 13.02.2017 Latest check for patch:| 13.02.2017 09:12 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

sos112.si XSS vulnerability

Vulnerable URL: http://www.sos112.si/slo/iskanje.php?searchsource=0=test=10=urszr=long=all=wrd%22%3E%3Cimg%20src=null%20onerror=prompt/OPENBUGBOUNTY/%3E==&cmd.x;=0&cmd.y;=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability...

si-tech.co.jp XSS vulnerability

Vulnerable URL: http://www.si-tech.co.jp/preview/search.php?key=="=vendor=device=ASC Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2569376 VIP website status:| No Check...

acord-92.si XSS vulnerability

Vulnerable URL: http://www.acord-92.si/iskalnik/?isci=%27%22%2F%3E%3E%3C%2Fscript%3E%3Cscript%3Ealert%28%2FOPENBUGBOUNTY%2F%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...