npo-bunkazai.org XSS vulnerability

Open Bug Bounty ID: OBB-447268 Description| Value ---|--- Affected Website:| npo-bunkazai.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

CVE-2015-5227

The Landing Pages plugin before 1.9.2 for WordPress allows remote attackers to execute arbitrary code via the url parameter...

PT-2017-6833

Name of the Vulnerable Software and Affected Versions Landing Pages plugin versions prior to 1.9.2 Description The issue allows remote attackers to execute arbitrary code. This is achieved via the url parameter. Recommendations For versions prior to 1.9.2, update to version 1.9.2 or later to...

CVE-2015-5227: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The Landing Pages plugin before 1.9.2 for WordPress allows remote attackers to execute arbitrary code via the url parameter...

kvit.dk XSS vulnerability

Vulnerable URL: http://www.kvit.dk/dk/learning/article.php?id=%22%3E%3Csvg%2Fonload%3Dalert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9625879 VIP website...

EyesOfNetwork web interface cross-site scripting vulnerability (CNVD-2017-33356)

EyesOfNetwork "EON" is an open source solution that combines practical ITIL processes with a technical interface that allows its workday program. A cross-site scripting vulnerability exists in the EyesOfNetwork web interface, which allows a remote authenticated user to inject arbitrary web script...

Cross site scripting

Cross-site scripting XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the url parameter to module/moduleframe/index.php...

CVE-2017-14981: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS was discovered in ATutor before 2.2.3. The vulnerability exists due to insufficient filtration of data url in /mods/standard/rssfeeds/editfeed.php. An attacker could inject arbitrary HTML and script code into a browser in the context of the vulnerable website...

CVE-2017-14985: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the url parameter to module/moduleframe/index.php...

CVE-2017-14981

Cross-Site Scripting XSS was discovered in ATutor before 2.2.3. The vulnerability exists due to insufficient filtration of data url in /mods/standard/rssfeeds/editfeed.php. An attacker could inject arbitrary HTML and script code into a browser in the context of the vulnerable website...

PT-2017-13804

Name of the Vulnerable Software and Affected Versions EyesOfNetwork version 5.1-0 Description The issue is related to a cross-site scripting XSS vulnerability in the EyesOfNetwork web interface. This allows remote authenticated users to inject arbitrary web script or HTML via the url parameter to...

CVE-2017-14524

Multiple open redirect vulnerabilities in OpenText Documentum Administrator 7.2.0180.0055 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a 1 URL in the startat parameter to xda/help/en/default.htm or 2 /%09/ slash encoded horizontal tab slash...

CVE-2014-9686: Undefined Security Weakness

The Googlemaps plugin 3.2 and earlier for Joomla! allows remote attackers with control of a sub-domain belonging to a victim domain to cause a denial of service via the 'url' parameter to plugingooglemap3kmlprxy.php. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7428...

CVE-2014-9686

The Googlemaps plugin 3.2 and earlier for Joomla! allows remote attackers with control of a sub-domain belonging to a victim domain to cause a denial of service via the 'url' parameter to plugingooglemap3kmlprxy.php. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7428...

PT-2017-6382

Name of the Vulnerable Software and Affected Versions Joomla! Googlemaps plugin version 3.2 and earlier Description The issue allows remote attackers with control of a sub-domain belonging to a victim domain to cause a denial of service. This is achieved via the url parameter to the "plugin...

altenergymag.com XSS vulnerability

Vulnerable URL: http://www.altenergymag.com/content.php?issuenumber=1"...

PT-2017-12765

Name of the Vulnerable Software and Affected Versions Vebto Pixie Image Editor versions 1.4 through 1.7 Description A Server Side Request Forgery issue allows remote attackers to disclose information or execute arbitrary code via the url parameter to "Launderer.php" API endpoint. Recommendations...

CVE-2017-12905: Server-Side Request Forgery (SSRF)

Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote attackers to disclose information or execute arbitrary code via the url parameter to Launderer.php...

laod.cn Open Redirect vulnerability

Open Bug Bounty ID: OBB-311163 Description| Value ---|--- Affected Website:| laod.cn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

eveningecho.ie XSS vulnerability

Vulnerable URL: http://www.eveningecho.ie/?s%3D%22%3E%3Csvg%20onload%3Dalert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 221873 VIP website status:| No...