34 matches found
spb.2-berega.ru XSS vulnerability
Open Bug Bounty ID: OBB-456268 Description| Value ---|--- Affected Website:| spb.2-berega.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
barier-spb.ru XSS vulnerability
Open Bug Bounty ID: OBB-441446 Description| Value ---|--- Affected Website:| barier-spb.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
spb.ucheba.ru XSS vulnerability
Vulnerable URL: http://spb.ucheba.ru/search?eq=s:fr=to=\n Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|-...
spb-kolyaska.ru XSS vulnerability
Vulnerable URL: http://spb-kolyaska.ru/s.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3100288 VIP website status:| No Coordinated Disclosure Timeline: Description| Value...
SPB TV - Free Online TV - Certificates or keys found, ContentProvider mode not defined, Exported components vulnerabilities
HackApp vulnerability scanner discovered that application SPB TV - Free Online TV published at the 'play' market has multiple vulnerabilities...
CityZen - гид по здоровому СПб - Dangerous filesystem permissions, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application CityZen - гид по здоровому СПб published at the 'play' market has multiple vulnerabilities...
remont-spb-na-zakaz.ru XSS vulnerability
Vulnerable URL: http://remont-spb-na-zakaz.ru/bitrix/templates/repair/js/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
CVE-2006-1243
CVE-2006-1243 affects Simple PHP Blog (SPB) up to version 0.4.7.1, via install05.php. The vulnerability is a local file inclusion triggered by improper handling of the blog_language parameter, allowing directory traversal and a NUL character to force inclusion of arbitrary local files (demonstrat...
CVE-2005-4589
Spb Kiosk Engine 1.0.0.1 stores the administrator's passcode in the registry in plaintext, which allows local users to obtain the passcode...
CVE-2005-4590
Spb Kiosk Engine 1.0.0.1 allows local users to bypass restrictions on allowed applications via 1 removable media containing a program that will execute because of the autorun setting and 2 applications that are able to invoke other applications, as demonstrated by a file: URL specifying a .exe fi...
CVE-2005-4590
CVE-2005-4590 : Affects Spb Kiosk Engine 1.0.0.1. Local users can bypass restrictions on allowed applications via (1) removable media with an autorun-executing program and (2) applications that invoke other apps, demonstrated by a file: URL for a .exe. Root cause is bypass of application-restrict...
CVE-2005-4590
Spb Kiosk Engine 1.0.0.1 allows local users to bypass restrictions on allowed applications via 1 removable media containing a program that will execute because of the autorun setting and 2 applications that are able to invoke other applications, as demonstrated by a file: URL specifying a .exe fi...
CVE-2005-4589
CVE-2005-4589 affects Spb Kiosk Engine 1.0.0.1, where the administrator passcode is stored in plaintext in the registry. The root cause is insecure storage of credentials in the registry, enabling local users to obtain the passcode. The NVD entry notes a LOW base score (CVSS2: AV:L/AC:L/Au:N/C:P/...