investwithaview.org XSS vulnerability

Open Bug Bounty ID: OBB-588791 Description| Value ---|--- Affected Website:| investwithaview.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

embassyvillagepty.com XSS vulnerability

Open Bug Bounty ID: OBB-587981 Description| Value ---|--- Affected Website:| embassyvillagepty.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

edificioreflex.cl XSS vulnerability

Open Bug Bounty ID: OBB-587958 Description| Value ---|--- Affected Website:| edificioreflex.cl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-1000138

I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the server to read or update internal resources...

CVE-2018-1000138: Server-Side Request Forgery (SSRF)

I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the server to read or update internal resources...

Cross site scripting

Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page using the url parameter...

CVE-2017-14801

Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page using the url parameter...

PT-2018-5722

Name of the Vulnerable Software and Affected Versions: NetIQ Access Manager versions prior to 4.3.3 Description: The issue allows attackers to perform a reflected XSS attack by using the url parameter to reflect back malicious code into the called page. Recommendations: For versions prior to 4.3....

CVE-2017-14801: Improper Neutralization of Input During Web Page Generation

Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page using the url parameter...

knsgj.net XSS vulnerability

Open Bug Bounty ID: OBB-566312 Description| Value ---|--- Affected Website:| knsgj.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Server side request forgery (ssrf)

GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter...

CVE-2018-7055: Server-Side Request Forgery (SSRF)

GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter...

PT-2018-17873

Name of the Vulnerable Software and Affected Versions RoomWizard versions prior to 4.4.x Description The issue allows for Server-Side Request Forgery SSRF via the url parameter in the GroupViewProxyServlet. Recommendations For versions prior to 4.4.x, update to version 4.4.x or later to resolve t...

Cozy Cross-Site Scripting Vulnerability

Cozy is a personal cloud platform. The platform features file storage and management, application backup, and schedule management. A cross-site scripting vulnerability exists in Cozy. A remote attacker can exploit this vulnerability to gain administrator access via JavaScript code in the 'url'...

CVE-2018-6824

Cozy version 2 has XSS allowing remote attackers to obtain administrative access via JavaScript code in the url parameter to the /api/proxy URI, as demonstrated by an XMLHttpRequest call with an 'email:"[email protected]"' request, which can be followed by a password reset...

Cross site request forgery (csrf)

Cozy version 2 has XSS allowing remote attackers to obtain administrative access via JavaScript code in the url parameter to the /api/proxy URI, as demonstrated by an XMLHttpRequest call with an 'email:"email protected"' request, which can be followed by a password reset...

PT-2018-17760

Name of the Vulnerable Software and Affected Versions Cozy version 2 Description The issue allows remote attackers to obtain administrative access via JavaScript code in the url parameter to the "/api/proxy" API endpoint. This can be achieved through an XMLHttpRequest call with a request containi...

Atlassian Confluence Server Cross-Site Scripting Vulnerability (CNVD-2018-03444)

Atlassian Confluence Server is a suite of professional enterprise knowledge management and collaboration software from Atlassian Australia, which can also be used to build an enterprise WiKi. the software enables collaboration and knowledge sharing amongst team members. A cross-site scripting...

CVE-2018-6824: Improper Neutralization of Input During Web Page Generation

Cozy version 2 has XSS allowing remote attackers to obtain administrative access via JavaScript code in the url parameter to the /api/proxy URI, as demonstrated by an XMLHttpRequest call with an 'email:"[email protected]"' request, which can be followed by a password reset...

CVE-2017-18086

Various resources in Atlassian Confluence Server before version 6.4.2 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the issuesURL parameter...