Project description is persistent XSS vector for project admins

This issue is a clone of another one that was fixed in OD but left unfixed in BTF as "admin xss". It has been pointed out by several customers that this exploit requires only project admin level of privilege. The following project description: code alert1 code Pops up in the view project page, th...

Unfixed XSS vulnerability at www.shopparos.gr

Security researcher d@ydream, has submitted on 14/09/2013 a cross-site-scripting XSS vulnerability affecting www.shopparos.gr, which at the time of submission ranked 16206287 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/02/2014. It is...

Dell.com Open Redirection

Title: Dell Open URL Redirection Vulnerability Status: Unfixed Severity: High Works on: Any browser with any version Homepage: www.Dell.com Author: GoMeR-12 Email: [email protected] Description: I have found Open URL Redirection Vulnerabilities in DEll 'sdialogs . ThisVulnerability is exploitable...

Facebook Open Redirect

Description: Title : Facebook Open URL Redirection Vulnerability 2013 Status : Unfixed Severity : High Works on : Any browser with any version Homepage : www.facebook.com Author : Arul Kumar.V Email : [email protected] I have found Open URL Redirection Vulnerabilities in facebook's dialogs...

Kaspersky Internet Security 2013 - Denial of Service

I usually do not write security advisories unless absolutely necessary. This time I should, however I have neither the time, nor the desire to do so. But Kaspersky did not react, so ... quick and dirty: Kaspersky Internet Security 2013 and any other Kaspersky product which includes the firewall...

Kaspersky Internet Security 2013 Denial Of Service

I usually do not write security advisories unless absolutely necessary. This time I should, however I have neither the time, nor the desire to do so. But Kaspersky did not react, so ... quick and dirty: Kaspersky Internet Security 2013 and any other Kaspersky product which includes the firewall...

Unfixed XSS vulnerability at chemicaltechnologyinc.com

Security researcher PlanetCreator, has submitted on 02/08/2013 a cross-site-scripting XSS vulnerability affecting chemicaltechnologyinc.com, which at the time of submission ranked 10402267 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.youjizz.com

Security researcher Atmon3r, has submitted on 12/02/2012 a cross-site-scripting XSS vulnerability affecting www.youjizz.com, which at the time of submission ranked 224 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/02/2012. It is currently...

Unfixed XSS vulnerability at www.lactualite.com

Security researcher Atmon3r, has submitted on 12/01/2012 a cross-site-scripting XSS vulnerability affecting www.lactualite.com, which at the time of submission ranked 144240 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...

Unfixed XSS vulnerability at www.ascension-tech.com

Security researcher Trueliarx, has submitted on 12/01/2012 a cross-site-scripting XSS vulnerability affecting www.ascension-tech.com, which at the time of submission ranked 3643517 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It ...

Unfixed XSS vulnerability at www.achatcommerce.com

Security researcher Atmon3r, has submitted on 12/01/2012 a cross-site-scripting XSS vulnerability affecting www.achatcommerce.com, which at the time of submission ranked 976602 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...

Unfixed XSS vulnerability at tradingkstocks.com

Security researcher Atmon3r, has submitted on 12/01/2012 a cross-site-scripting XSS vulnerability affecting tradingkstocks.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currently...

Unfixed XSS vulnerability at www.goingout.ro

Security researcher Atmon3r, has submitted on 12/01/2012 a cross-site-scripting XSS vulnerability affecting www.goingout.ro, which at the time of submission ranked 843958 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is current...

Unfixed XSS vulnerability at barmafia.free.fr

Security researcher Atmon3r, has submitted on 12/01/2012 a cross-site-scripting XSS vulnerability affecting barmafia.free.fr, which at the time of submission ranked 3618751 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...

Unfixed XSS vulnerability at www.gamercharts.com

Security researcher Rugburn, has submitted on 12/01/2012 a cross-site-scripting XSS vulnerability affecting www.gamercharts.com, which at the time of submission ranked 151288 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...

Unfixed XSS vulnerability at www.merchantcircle.com

Security researcher Rugburn, has submitted on 12/01/2012 a cross-site-scripting XSS vulnerability affecting www.merchantcircle.com, which at the time of submission ranked 1465 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/01/2012. It is...

Unfixed XSS vulnerability at www.ebates.com

Security researcher Rugburn, has submitted on 12/01/2012 a cross-site-scripting XSS vulnerability affecting www.ebates.com, which at the time of submission ranked 1709 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/01/2012. It is currently...

Unfixed XSS vulnerability at www.challenges.fr

Security researcher Atmon3r, has submitted on 12/01/2012 a cross-site-scripting XSS vulnerability affecting www.challenges.fr, which at the time of submission ranked 13946 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...

Unfixed XSS vulnerability at www.citysearch.com

Security researcher Rugburn, has submitted on 12/01/2012 a cross-site-scripting XSS vulnerability affecting www.citysearch.com, which at the time of submission ranked 1386 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/01/2012. It is...

Unfixed XSS vulnerability at revistacofradia.com

Security researcher Atmon3r, has submitted on 12/01/2012 a cross-site-scripting XSS vulnerability affecting revistacofradia.com, which at the time of submission ranked 2516460 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...