si-tech.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-273239 Description| Value ---|--- Affected Website:| si-tech.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

blog.bosch-si.com XSS vulnerability

Vulnerable URL: http://blog.bosch-si.com/categories?s=xss%3Cscript%3Ealert%27OPENBUGBOUNTY%27;%3C/script%3E& Details: Description| Value ---|--- Patched:| Yes, at 13.02.2017 Latest check for patch:| 13.02.2017 09:12 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

sos112.si XSS vulnerability

Vulnerable URL: http://www.sos112.si/slo/iskanje.php?searchsource=0=test=10=urszr=long=all=wrd%22%3E%3Cimg%20src=null%20onerror=prompt/OPENBUGBOUNTY/%3E==&cmd.x;=0&cmd.y;=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability...

si-tech.co.jp XSS vulnerability

Vulnerable URL: http://www.si-tech.co.jp/preview/search.php?key=="=vendor=device=ASC Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2569376 VIP website status:| No Check...

acord-92.si XSS vulnerability

Vulnerable URL: http://www.acord-92.si/iskalnik/?isci=%27%22%2F%3E%3E%3C%2Fscript%3E%3Cscript%3Ealert%28%2FOPENBUGBOUNTY%2F%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

SI Book Tracker - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application SI Book Tracker published at the 'play' market has multiple vulnerabilities...

Wordpress SI CAPTCHA AntiSpam 插件-test/index.php-跨站脚本漏洞

No description provided by source...

Draytek Vigor ACS-SI multiple security vulnerabilities

Default account, unauthorized access, directory traversal...

Multiple vulnerabilities in DrayTek VigorACS SI

DrayTek VigorACS SI = 1.3.0 Vigor ACS-SI Edition is a Central Management System for DrayTek routers and firewalls, providing System Integrators or system administration personnel a real-time integrated monitoring, configuration and management platform...

DrayTek VigorACS SI 1.3.0 - Multiple Vulnerabilities

No description provided by source. DrayTek VigorACS SI = 1.3.0 Vigor ACS-SI Edition is a Central Management System for DrayTek routers and firewalls, providing System Integrators or system administration personnel a real-time integrated monitoring, configuration and management platform...

DrayTek VigorACS SI 1.3.0 - Multiple Vulnerabilities

DrayTek VigorACS SI versions 1.3.0 and below suffer from local file inclusion, remote file upload, file write, and default login vulnerabilities. DrayTek VigorACS SI /ACSServer/ We found that most of the VigorACS SI deployments are using the default http authentication settings acs/password. This...

DrayTek VigorACS SI 1.3.0 - Multiple Vulnerabilities

DrayTek VigorACS SI 1.3.0 - Multiple Vulnerabilities DrayTek VigorACS SI /ACSServer/ We found that most of the VigorACS SI deployments are using the default http authentication settings acs/password. This is not so much a software vulnerability but more a configuration issue. 2.2 Unauthenticated...

DrayTek VigorACS SI 1.3.0 File Write / LFI / File Upload

DrayTek VigorACS SI /ACSServer/ We found that most of the VigorACS SI deployments are using the default http authentication settings acs/password. This is not so much a software vulnerability but more a configuration issue. 2.2 Unauthenticated arbitrary file read/write functionality via...

CVE-2014-5190

Cross-site scripting XSS vulnerability in captcha-secureimage/test/index.php in the SI CAPTCHA Anti-Spam plugin 2.7.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

Cross site scripting

Cross-site scripting XSS vulnerability in captcha-secureimage/test/index.php in the SI CAPTCHA Anti-Spam plugin 2.7.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2014-5190

The CVE-2014-5190 entry concerns the WordPress plugin SI CAPTCHA Anti-Spam (v2.7.4). The connected documents confirm a Cross-Site Scripting (XSS) vulnerability in captcha-secureimage/test/index.php that allows remote attackers to inject arbitrary web script or HTML via PATH_INFO. The practical im...

CVE-2014-5190

Cross-site scripting XSS vulnerability in captcha-secureimage/test/index.php in the SI CAPTCHA Anti-Spam plugin 2.7.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

WordPress SI CAPTCHA Plugin <= 2.7.4 - XSS

Because of this vulnerability in captcha-secureimage/test/index.php, the attackers can inject arbitrary web script or HTML via the PATHINFO. Solution Update the plugin...

WordPress SI CAPTCHA Cross Site Scripting

|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress SI CAPTCHA Anti-Spam Plugin Cross site scripting | | Exploit Author: Ashiyane Digital Security Team | | Date : Date: 2014-08-02 | | Vendor...

Unfixed XSS vulnerability at www.si-wifi.org

Security researcher shellc0de, has submitted on 31/05/2012 a cross-site-scripting XSS vulnerability affecting www.si-wifi.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2012. It is currently...