tiny4k.com XSS vulnerability

Open Bug Bounty ID: OBB-245697 Description| Value ---|--- Affected Website:| tiny4k.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hikingtours.hk XSS vulnerability

Vulnerable URL: https://hikingtours.hk/contact.php?subject=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

nostalgie-tours.at XSS vulnerability

Vulnerable URL: http://www.nostalgie-tours.at/kontakt/formularfehler.php?thisform==%22%3Eblub%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 21:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...

Travel Tours Script 2.0 SQL Injection

Exploit Title: Travel Tours Script v2.0 - SQL Injection Google Dork: N/A Date: 11.03.2017 Vendor Homepage: https://www.phpjabbers.com/ Software: https://www.phpjabbers.com/travel-tours-script/ Demo: http://demo.phpjabbers.com/index.php?demo=vpl&front=1&lid=1 Version: 2.0 Tested on: Win7 x64, Kali...

Travel Tours Script 2.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Travel Tours Script v2.0 - SQL Injection Google Dork: N/A Date: 11.03.2017 Vendor Homepage: https://www.phpjabbers.com/ Software: https://www.phpjabbers.com/travel-tours-script/ Demo:...

Travel Tours Script 2.0 - SQL Injection

Travel Tours Script 2.0 - SQL Injection Exploit Title: Travel Tours Script v2.0 - SQL Injection Google Dork: N/A Date: 11.03.2017 Vendor Homepage: https://www.phpjabbers.com/ Software: https://www.phpjabbers.com/travel-tours-script/ Demo: http://demo.phpjabbers.com/index.php?demo=vpl&front=1&lid=...

Travel Tours Script 2.0 - SQL Injection

Exploit Title: Travel Tours Script v2.0 - SQL Injection Google Dork: N/A Date: 11.03.2017 Vendor Homepage: https://www.phpjabbers.com/ Software: https://www.phpjabbers.com/travel-tours-script/ Demo: http://demo.phpjabbers.com/index.php?demo=vpl&front=1&lid=1 Version: 2.0 Tested on: Win7 x64, Kali...

pharma.univ-tours.fr XSS vulnerability

Vulnerable URL: http://pharma.univ-tours.fr/servlet/com.jsbsoft.jtf.core.SG Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 18:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

gettysburgtours.net XSS vulnerability

Vulnerable URL: http://www.gettysburgtours.net/?z=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 10:57 GMT Vulnerability type:| XSS Vulnerabilit...

miamitours.us XSS vulnerability

Vulnerable URL: http://www.miamitours.us/?z=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:56 GMT Vulnerability type:| XSS Vulnerability...

orlando-tours.com XSS vulnerability

Vulnerable URL: http://www.orlando-tours.com/?z=%3C/title%3E%3C/script/%22-alert%280%29-%22--%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:56 GMT Vulnerability type:| XSS Vulnerability...

Big Bus Tours - City Guide - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Big Bus Tours - City Guide published at the 'play' market has multiple vulnerabilities...

copenhagen.foodtours.eu XSS vulnerability

Vulnerable URL: http://copenhagen.foodtours.eu/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= Derp Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

CVE-2014-6923

The Dubrovnik Guided Walking Tours aka com.mytoursapp.android.app351 application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Dubrovnik Guided Walking Tours aka com.mytoursapp.android.app351 application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6923

The CVE-2014-6923 entries concern the Dubrovnik Guided Walking Tours Android app (com.mytoursapp.android.app351) version 1.3.2. Affected component: network security logic where the app does not verify X.509 certificates from SSL servers. Root cause: missing/incorrect certificate validation allows...

CVE-2014-6923

The Dubrovnik Guided Walking Tours aka com.mytoursapp.android.app351 application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7599

Name of the Vulnerable Software and Affected Versions Dubrovnik Guided Walking Tours aka com.mytoursapp.android.app351 version 1.3.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does no...

CVE-2014-6923: Undefined Security Weakness

The Dubrovnik Guided Walking Tours aka com.mytoursapp.android.app351 application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6782

The Abraham Tours aka com.mytoursapp.android.app432 application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...