MapsMarker.com e.U.: Cross-site Scripting (XSS) in /updates-pro/archive/

Hey guys. The dir parameter on /updates-pro/archive/ seems to be vulnerable to Cross-site Scripting. Steps to reproduce: 1- Navigate to: https://www.mapsmarker.com/updates-pro/archive/?dir=v3.0.1 2- Add this to the url: 3- Result in attached printsceen. Or quite simple visit:...

CVE-2017-7343

An open redirect vulnerability in Fortinet FortiPortal 4.0.0 and below allows attacker to execute unauthorized code or commands via the url parameter...

Open redirect

An open redirect vulnerability in Fortinet FortiPortal 4.0.0 and below allows attacker to execute unauthorized code or commands via the url parameter...

CVE-2017-7343: URL Redirection to Untrusted Site

An open redirect vulnerability in Fortinet FortiPortal 4.0.0 and below allows attacker to execute unauthorized code or commands via the url parameter...

PT-2017-17675

Name of the Vulnerable Software and Affected Versions FortiPortal versions 4.0.0 and below Description The issue allows an attacker to execute unauthorized code or commands via the url parameter. This is due to an open redirect vulnerability. Recommendations For FortiPortal versions 4.0.0 and...

almiur.ru XSS vulnerability

Vulnerable URL: http://almiur.ru/versesearch.php?VerseName=asfvasfvalert'OPENBUGBOUNTY'...

CVE-2015-4070

Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite plugin 1.1.1.1 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...

CVE-2015-4070

CVE-2015-4070: Open redirect vulnerability in Wow Moodboard Lite plugin for WordPress (version 1.1.1.1) affecting the proxyimages function in wowproxy.php. Attackers can redirect users to arbitrary sites via the url parameter, enabling phishing. The provided documents confirm the vulnerability bu...

PT-2017-6728

Name of the Vulnerable Software and Affected Versions Wow Moodboard Lite plugin version 1.1.1.1 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter. This is related to an open redirect vulnerability in...

CVE-2015-4070: URL Redirection to Untrusted Site

Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite plugin 1.1.1.1 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...

anton.biz XSS vulnerability

Vulnerable URL: http://www.anton.biz/Suche?search=%22%3Eblub%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3410252 VIP website...

CVE-2012-1301: Improper Input Validation

The FeedProxy.aspx script in Umbraco 4.7.0 allows remote attackers to proxy requests on their behalf via the "url" parameter...

PT-2017-5081

Name of the Vulnerable Software and Affected Versions: Umbraco version 4.7.0 Description: The issue allows remote attackers to proxy requests on their behalf. This is achieved via the url parameter in the FeedProxy.aspx script. Recommendations: For Umbraco version 4.7.0, consider restricting acce...

humus.name XSS vulnerability

Vulnerable URL: http://www.humus.name/index.php?page=Textures"alert/OPENBUGBOUNTY/...

Multiple Jensen of Scandinavia Air:Link Open Redirect Vulnerabilities

Air:Link 3G, Air:Link 5000AC, Air:Link 59300 are routers from Jensen of Scandinavia, Norway. An open redirect vulnerability exists in the handling of the 'submit-url' parameter on the /goform/ page of multiple Jensen of Scandinavia Air:Link products. An attacker can construct a malicious URI, tri...

Multiple Jensen of Scandinavia Air:Link 'return-url' parameter open redirect vulnerability

Air:Link 3G, Air:Link 5000AC, Air:Link 59300 are routers from Jensen of Scandinavia, Norway. An open redirect vulnerability exists in the handling of the 'return-url' parameter on the /goform/formLogout page of multiple Jensen of Scandinavia Air:Link products. An attacker can construct a maliciou...

CVE-2016-10315

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the submit-url parameter to certain /goform/ pages...

CVE-2016-10315

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the submit-url parameter to certain /goform/ pages...

Open redirect

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the return-url parameter to /goform/formLogout...

Open redirect

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the submit-url parameter to certain /goform/ pages...