CVE-2014-2675

CVE-2014-2675 concerns the WordPress WP HTML Sitemap plugin (version 1.2) and its file inc/AdminPage.php. The vulnerability is a Cross-Site Request Forgery (CSRF) that allows an attacker to hijack the administrator’s authentication to perform a sensitive action: deleting the sitemap via a request...

CVE-2014-2675

Cross-site request forgery CSRF vulnerability in inc/AdminPage.php in the WP HTML Sitemap plugin 1.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete the sitemap via a request to the wp-html-sitemap page in wp-admin/options-general.php...

LocalTapiola: Sitemap causing strain on your Lahitapiola.fi server

Basic report information Summary: Your sitemap isn't split into many other sitemaps which causes all of the sitemap URL's to start loading in just 1 Sitemap which in turn causes a big strain on your server. Description: It took more than 5 minutes just to load your sitemap. That is not normal...

travertinewines.com.au XSS vulnerability

Open Bug Bounty ID: OBB-500686 Description| Value ---|--- Affected Website:| travertinewines.com.au Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

govciooutlook.com XSS vulnerability

Open Bug Bounty ID: OBB-328659 Description| Value ---|--- Affected Website:| govciooutlook.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

picturepush.com XSS vulnerability

Vulnerable URL: https://picturepush.com/sitemap?" Details: Description| Value ---|--- Patched:| Yes, at 31.07.2017 Latest check for patch:| 31.07.2017 18:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 213783 VIP website status:| No Coordinated Disclosure...

Concrete CMS: Stored XSS vulnerability in additional URLs in 'Location' dialog [Sitemap]

Intro "Transformers: Dark of the Crayons" Type of issue: Core CMS issue Level of severity: Internal Attack Vector Concrete5 version: 8.2.0 RC2 rev. 0a26b63c4a64d42e7afb36aba0a6e4d1f4c53d7d July 19th Summary There is Stored XSS vulnerability in additional URLs in 'Location' dialog. This issue can ...

rutronik24.com XSS vulnerability

Vulnerable URL: https://www.rutronik24.com/index.php?m=oc=sitemap==01A"--!"=02ATRI Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 276913 VIP website status:| No Check rutronik24.co...

pickatyre.com XSS vulnerability

Open Bug Bounty ID: OBB-230301 Description| Value ---|--- Affected Website:| pickatyre.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

daisychaingiftcompany.com XSS vulnerability

Open Bug Bounty ID: OBB-230264 Description| Value ---|--- Affected Website:| daisychaingiftcompany.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

oldbyre.co.uk XSS vulnerability

Vulnerable URL: http://www.oldbyre.co.uk/sitemap.jsp?a=test%22%27--!%3E%3CImage%0CSrcset%3DK%0COnerror%3DconfirmOPENBUGBOUNTY%0C Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

labelladonna.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-230243 Description| Value ---|--- Affected Website:| labelladonna.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

snowcentraluk.com XSS vulnerability

Vulnerable URL: http://www.snowcentraluk.com/sitemap.jsp?a=test%22%27--!%3E%3CImage%0CSrcset%3DK%0COnerror%3DconfirmOPENBUGBOUNTY%0C Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

classiccollectionsgiftshop.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-230195 Description| Value ---|--- Affected Website:| classiccollectionsgiftshop.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6....

meirionmill.co.uk XSS vulnerability

Vulnerable URL: http://www.meirionmill.co.uk/sitemap.jsp?a=test%22%27--!%3E%3CImage%0CSrcset%3DK%0COnerror%3DconfirmOPENBUGBOUNTY%0C Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

mincost.co.uk XSS vulnerability

Vulnerable URL: http://www.mincost.co.uk/sitemap.jsp?a=test%22%27--!%3E%3CImage%0CSrcset%3DK%0COnerror%3DconfirmOPENBUGBOUNTY%0C Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 21227615 VIP website status:| No...

trusports.com.au XSS vulnerability

Vulnerable URL: https://www.trusports.com.au/sitemap.jsp?a=test%22%27--!%3E%3CImage%0CSrcset%3DK%0COnerror%3DconfirmOPENBUGBOUNTY%0C Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Web Application Sitemap

Publishes the sitemap of the web application as seen by the scan. The list of all URLs that have been detected during the scan are available as an attachment. For each URL in the sitemap, the following information is provided: - The first time the URL is detected - The logic used to detect the UR...

swarm - A Modular Distributed Penetration Testing Tool

Swarm is an open source modular distributed penetration testing Tool that use distributed task queue to implement communication in the master-slave mode system and use MongoDB for data storage. It consists of a distributed framework and function modules. The function module can be an entirely new...

Zomato: Visibility Robots.txt file

Issue detail:- The web server contains a robots.txt file. Issue background:- The file robots.txt is used to give instructions to web robots, such as search engine crawlers, about locations within the web site that robots are allowed, or not allowed, to crawl and index. The presence of the...