price-mag.net XSS vulnerability

Open Bug Bounty ID: OBB-454651 Description| Value ---|--- Affected Website:| price-mag.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

Design/Logic Flaw

lilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument...

aboutmybaby.com XSS vulnerability

Open Bug Bounty ID: OBB-367668 Description| Value ---|--- Affected Website:| aboutmybaby.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

wilsonorwoskyfuneralhome.com XSS vulnerability

Open Bug Bounty ID: OBB-363769 Description| Value ---|--- Affected Website:| wilsonorwoskyfuneralhome.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross-site Scripting (XSS)

next is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary JavaScript through the url...

avaz.es XSS vulnerability

Open Bug Bounty ID: OBB-230340 Description| Value ---|--- Affected Website:| avaz.es Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross-site Scripting (XSS)

github.com/camlistore/camlistore is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute an arbitrary JavaScript JS code via the URL...

duchange-staelen.notaires.fr XSS vulnerability

Vulnerable URL:...

MGASA-2016-0413 Updated drupal packages fix security vulnerability

Inconsistent name for term access query; information on taxonomy terms might have been disclosed to unprivileged users CVE-2016-9449. Confirmation forms allow external URLs to be injected CVE-2016-9451...

CVE-2016-7966

Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail's plaintext viewer. Due to the parser used on the URL it was not possible to include the equal sign = or a space into the injected HTML, which greatly reduces the available HTML functionality...

Web Server HTTP Request URL Injection (CVE-2014-8150)

A security bypass vulnerability exists in web servers. The vulnerability is due to an input validation error when handling a request's URL contains line feeds and carriage return...

hyundai-motor.ro XSS vulnerability

Vulnerable URL: http://www.hyundai-motor.ro/test-drive?model=%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 408668 VIP websi...

worden.fr XSS vulnerability

Vulnerable URL: https://www.worden.fr/search.html?keyword=%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1118719 VIP websi...

CVE-2016-0346

Cross-site scripting XSS vulnerability in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 before IF12, and 10.1.1 before IF19 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

Fedora 22 : monitorix-3.8.1-1.fc22 (2015-12813acfa3)

This is a maintenance release that mainly fixes a Document Object Model DOM-based cross-site scripting XSS vulnerability in the monitorix.cgi file. Such vulnerability is by injection a JS code in the when parameter of the URL shown after generating the graphs. Additionally, a potential denial of...

Microsoft Exchange Server Cross-Site Scripting Vulnerability (CNVD-2016-00279)

Microsoft Exchange Server is a popular enterprise-class mail server developed by Microsoft. A cross-site scripting vulnerability exists in Microsoft Exchange Server that allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Arastta 1.1.5 Cross Site Scripting

Security Advisory - Curesec Research Team 1. Introduction Affected Product: Arastta 1.1.5 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://arastta.org/ Vulnerability Type: XSS Remote Exploitable: Yes Reported to vendor: 11/21/2015 Disclosed to public: 12/21/2015 Release mode: Fu...

vgraphix.eu vulnerability

Vulnerable URL: http://vgraphix.eu/short/index.php?format=simple=shorturl=http://xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 26.01.2016 Latest check for patch:| 26.01.2016 03:42 GMT Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

college.syu.edu.cn XSS vulnerability

Vulnerable URL: http://college.syu.edu.cn/jxxy/picview.asp?url=uppic.asp?FileName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

beeldbank.regionaalarchiefdordrecht.nl XSS vulnerability

Vulnerable URL: http://beeldbank.regionaalarchiefdordrecht.nl/index.cfm?fuseaction=search.doquery==true&value2;==&field2;==1=&op2;=&op1;=&op3;==0&value1;=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E&field1;=HDALLANDCOMMENTS&value3;=&field3;= Details: Description| Value ---|--- Patched:| ...