whichbingo.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-578478 Description| Value ---|--- Affected Website:| whichbingo.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2012-4744: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in ssearch.php in the Siche search module 0.5 for Zeroboard allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2012-4743: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ssearch.php in Siche search module 0.5 for Zeroboard allow remote attackers to execute arbitrary SQL commands via the 1 ss, 2 sm, 3 align, or 4 category parameters...

PT-2012-5570

Name of the Vulnerable Software and Affected Versions Siche search module version 0.5 for Zeroboard Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the search parameter in the...

PT-2012-5569

Name of the Vulnerable Software and Affected Versions Siche search module version 0.5 for Zeroboard Description The issue concerns SQL injection vulnerabilities in the ssearch.php file of the Siche search module. Remote attackers can execute arbitrary SQL commands by manipulating certain...