Dolibarr cross-site scripting vulnerability (CNVD-2019-00724)

Dolibarr is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in the user/card.php file ...

Dolibarr cross-site scripting vulnerability (CNVD-2019-00368)

Dolibarr is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr version 8.0.2,...

CVE-2018-19995

A stored cross-site scripting XSS vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address" POST or "town" POST parameter to user/card.php...

UBUNTU-CVE-2018-19995

A stored cross-site scripting XSS vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address" POST or "town" POST parameter to user/card.php...

Dual Data Leaks of Blur, Town of Salem Impact Millions

The new year has started off with the disclosure of two high-profile data breaches exposing the personal and password data of millions of people. Popular role-playing game Town of Salem saw the email addresses and passwords of more than 7.6 million players hacked; while a separate database issue...

PT-2019-9960 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr version 8.0.2 Description: A stored cross-site scripting issue allows remote authenticated users to inject arbitrary web script or HTML via the address or town parameter to the "user/card.php" endpoint. Recommendations: For Dolibarr...

CVE-2018-19995: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address" POST or "town" POST parameter to user/card.php...

PT-2019-9957 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr version 8.0.2 Description: A stored cross-site scripting issue allows remote authenticated users to inject arbitrary web script or HTML via the address or town parameter to "adherents/type.php" API endpoint. Recommendations: For...

CVE-2018-19992: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address" POST or "town" POST parameter to adherents/type.php...

watfordtn.org.uk XSS vulnerability

Open Bug Bounty ID: OBB-707968 Description| Value ---|--- Affected Website:| watfordtn.org.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

A week in security (October 15 – 21)

Last week on Malwarebytes Labs, we went over how to build your own motion-activated security camera, wondered whether FIDO is the future instrument to replace passwords and usernames, informed you about information operations on Twitter, and released our Q3 Malwarebytes Labs Cybercrime Tactics an...

beaconsfieldtowncouncil.gov.uk Improper Access Control vulnerability

Open Bug Bounty ID: OBB-675906 Description| Value ---|--- Affected Website:| beaconsfieldtowncouncil.gov.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:|...

wantagetowncouncil.gov.uk Improper Access Control vulnerability

Open Bug Bounty ID: OBB-675889 Description| Value ---|--- Affected Website:| wantagetowncouncil.gov.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

newmiltontowncouncil.gov.uk Improper Access Control vulnerability

Open Bug Bounty ID: OBB-675871 Description| Value ---|--- Affected Website:| newmiltontowncouncil.gov.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

Boys Town Healthcare Data Breach Exposed Personal Details of Patients

Another day, Another data breach! This time-sensitive and personal data of hundreds of thousands of people at Boys Town National Research Hospital have been exposed in what appears to be the largest ever reported breach by a pediatric care provider or children's hospital. According to the U.S...

china-town-74.fr XSS vulnerability

Open Bug Bounty ID: OBB-642990 Description| Value ---|--- Affected Website:| china-town-74.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

matsukawa-town.jp XSS vulnerability

Open Bug Bounty ID: OBB-611009 Description| Value ---|--- Affected Website:| matsukawa-town.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-9838

Dolibarr ERP/CRM is affected by multiple reflected Cross-Site Scripting XSS vulnerabilities in versions before 5.0.4: index.php leftmenu parameter, core/ajax/box.php PATHINFO, product/stats/card.php type parameter, holiday/list.php monthcreate, monthstart, and monthend parameters, and don/card.ph...

thebeckenhamgym.beckenham.towntalk.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-579426 Description| Value ---|--- Affected Website:| thebeckenhamgym.beckenham.towntalk.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

keighleycollege30525.keighley.towntalk.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-555774 Description| Value ---|--- Affected Website:| keighleycollege30525.keighley.towntalk.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv...