43 matches found
Cross site scripting
A vulnerability in the conferencing component of Mitel ST 14.2, versions GA29 19.49.9400.0 and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting XSS attack due to insufficient validation for the signin.php page. A successful exploit could allow an attack...
CVE-2018-12901: Improper Neutralization of Input During Web Page Generation
A vulnerability in the conferencing component of Mitel ST 14.2, versions GA29 19.49.9400.0 and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting XSS attack due to insufficient validation for the signin.php page. A successful exploit could allow an attack...
PT-2018-3753
Name of the Vulnerable Software and Affected Versions Mitel ST 14.2 versions GA29 19.49.9400.0 and earlier Description The issue is related to insufficient validation for the "signin.php" page, which could allow an unauthenticated attacker to conduct a reflected cross-site scripting XSS attack. A...
postjung.com XSS vulnerability
Open Bug Bounty ID: OBB-680095 Description| Value ---|--- Affected Website:| postjung.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
burnpavement.com XSS vulnerability
Open Bug Bounty ID: OBB-645778 Description| Value ---|--- Affected Website:| burnpavement.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-9103: Improper Neutralization of Input During Web Page Generation
A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 21.84.5535.0 and earlier, and Mitel ST 14.2, versions GA27 19.49.5200.0 and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting XSS attack due to insufficient...
PT-2018-18852
Name of the Vulnerable Software and Affected Versions Mitel MiVoice Connect versions R1707-PREM SP1 21.84.5535.0 and earlier Mitel ST 14.2 versions GA27 19.49.5200.0 and earlier Description The issue is related to insufficient validation for the "signin.php" page, which could allow an...
funformobile.com XSS vulnerability
Open Bug Bounty ID: OBB-253830 Description| Value ---|--- Affected Website:| funformobile.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
labauvephotography.com XSS vulnerability
Vulnerable URL: http://labauvephotography.com/signin.php?q=Basica75iy%22%3E%3Cscript%3Ealert/OPENBUGBOUNTY/%3C/script%3Etar6b Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...
thesixfigurementors.com XSS vulnerability
Vulnerable URL: https://thesixfigurementors.com/evpsfm/signin.php?msg=restricted=aHR0cHM6Ly90aGVzaXhmaWd1cmVtZW50b3JzLmNvbS9ldnBfc2ZtL2FjY291bnQvZmlsZXNfcHJldmlldy5waHA%252FaWQ9ZEdobExXUnBaMmwwWVd3dFpXTnZibTl0ZVMweUxtMXdOQSUzRCUzRCZwcm9maWxlPWJvb3RjYW1w%22%3E%3Csvg/onload=confirm%28/xssposed/%29/...
AllMyGuests <= 0.3.0 (AMG_serverpath) Remote Inclusion Vulnerabilities
No description provided by source. AllMyGuests 3.0 Remote File Inclusion Vulnerability Software: AllMyGuests Version: 3.0 Download: http://download.php-resource.net/AllMyGuests/AllMyGuests0.3.0.zip Found By: beks Bug In: /include/submit.inc.php /admin/index.php /include/cmsubmit.inc.php...
Unfixed XSS vulnerability at www.businesswood.com
Security researcher SaMTHG, has submitted on 15/10/2008 a cross-site-scripting XSS vulnerability affecting www.businesswood.com, which at the time of submission ranked 8842231 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...
CVE-2007-6124
Cross-site scripting XSS vulnerability in signin.php in Softbiz Freelancers Script 1 allows remote attackers to inject arbitrary web script or HTML via the errmsg parameter...
CVE-2007-6124
Cross-site scripting XSS vulnerability in signin.php in Softbiz Freelancers Script 1 allows remote attackers to inject arbitrary web script or HTML via the errmsg parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in signin.php in Softbiz Freelancers Script 1 allows remote attackers to inject arbitrary web script or HTML via the errmsg parameter...
CVE-2007-6124
CVE-2007-6124 describes a cross-site scripting (XSS) vulnerability in the Softbiz Freelancers Script 1, specifically in signin.php. The vulnerability allows a remote attacker to inject arbitrary web script or HTML by supplying a value for the errmsg parameter. The NVD entry lists a MEDIUM base sc...
CVE-2007-6124: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in signin.php in Softbiz Freelancers Script 1 allows remote attackers to inject arbitrary web script or HTML via the errmsg parameter...
CVE-2007-0172: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.3.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the AMGserverpath parameter to 1 comments.php and 2 signin.php; and possibly via a URL in unspecified parameters to 3 include/submit.inc.php, 4...
CVE-2006-4993: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.4.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the AMGconfigcfgserverpath parameter in 1 modules/AllMyGuests/signin.php aka the Nuke module and 2 AllMyGuests/signin.php aka the standalone...
AllMyGuests => ?_AMGconfig[cfg_serverpath] Remote File Inclusion Exploit
============================================================================ AllMyGuests = ?AMGconfigcfgserverpath Remote File Inclusion Exploit ============================================================================ Scirpt Infected signin.php Critical level : Dangerous...