256 matches found
PT-2018-3417
Name of the Vulnerable Software and Affected Versions: SAP Marketing versions 1.20 through 1.40 SAP Marketing component SAPSCORE versions 1.13 through 1.14 Description: The issue arises from insufficient encoding of user-controlled inputs, leading to a Cross-Site Scripting XSS vulnerability. This...
Liberapay: Current CSP Policy chained with HTML Injection can lead to Data Exfiltration
Hi Team, Summary While reviewing the CSP headers for en.liberapay.com i noticed that img-src has a source set to which means any source on the internet. The following is found in the current CSP Header config. img-src blob: data: Description: If the site is vulnerable to HTML Injection its possib...
inherentresolve.mil XSS vulnerability
Open Bug Bounty ID: OBB-559280 Description| Value ---|--- Affected Website:| inherentresolve.mil Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2017-17894
Readymade Job Site Script has CSRF via the /job URI...
CVE-2017-17895
Readymade Job Site Script has SQL Injection via the locationname array parameter to the /job URI...
CVE-2017-17896
Readymade Job Site Script has XSS via the keyword parameter to the /job URI...
Default credentials
Readymade Job Site Script has XSS via the keyword parameter to the /job URI...
Cross site request forgery (csrf)
Readymade Job Site Script has CSRF via the /job URI...
CVE-2017-17896: Improper Neutralization of Input During Web Page Generation
Readymade Job Site Script has XSS via the keyword parameter to the /job URI...
CVE-2017-17895: Improper Neutralization of Special Elements used in an SQL Command
Readymade Job Site Script has SQL Injection via the locationname array parameter to the /job URI...
CVE-2017-17894: Cross-Site Request Forgery (CSRF)
Readymade Job Site Script has CSRF via the /job URI...
PHP Scripts Mall Readymade Job Site Script Cross-Site Scripting Vulnerability
PHP Scripts Mall Readymade Job Site Script is a PHP based job site script by PHP Scripts Mall India. The script includes features like job management, profile management and email notifications. A cross-site scripting vulnerability exists in PHP Scripts Mall Readymade Job Site Script. A remote...
PHP Scripts Mall Readymade Job Site Script Cross Site Request Forgery Vulnerability
PHP Scripts Mall Readymade Job Site Script is a PHP based job site script by PHP Scripts Mall India. The script includes features like job management, profile management and email notifications. A cross-site request forgery vulnerability exists in PHP Scripts Mall Readymade Job Site Script. A...
CVE-2017-17895
Readymade Job Site Script has SQL Injection via the locationname array parameter to the /job URI...
CVE-2017-17894
CVE-2017-17894 affects the Readymade Job Site Script, with a CSRF flaw exploitable via the /job URI. Public sources (NVD/NVD-derived records) assign a CVSS‑3 base score of 8.8 (HIGH) and CVSS‑2 of 6.8 (MEDIUM), indicating network access required with user interaction typically needed (UI: REQUIRE...
CVE-2017-17896
CVE-2017-17896 affects Readymade Job Site Script with a cross-site scripting (XSS) vulnerability via the keyword parameter to the /job URI. The NVD entry reports a base score of 4.3 (CVSS2) and 6.1 (CVSS3), indicating that network access is required and user interaction is involved in a changed s...
PHP Scripts Mall Basic Job Site Script SQL Injection Vulnerability
PHP Scripts Mall Basic Job Site Script is a PHP based job site script by PHP Scripts Mall India. The script includes features such as job management, profile management and email notification. A SQL injection vulnerability exists in PHP Scripts Mall Basic Job Site Script version 2.0.5. A remote...
CVE-2017-17642
Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...