Sql injection

SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote authenticated administrators to execute arbitrary SQL commands via the url parameter to findusers.php. An example attack uses "into outfile" to create a backdoor program...

PT-2017-17639

Name of the Vulnerable Software and Affected Versions XOOPS versions prior to 2.5.8.1 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This can be achieved via the url parameter to the "findusers.php" endpoint. An example attack uses "into outfil...

CVE-2017-7290: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote authenticated administrators to execute arbitrary SQL commands via the url parameter to findusers.php. An example attack uses "into outfile" to create a backdoor program...

shoptilyoudrop.esy.es XSS vulnerability

Vulnerable URL: http://shoptilyoudrop.esy.es/link.php?url=javascript:alert%28/OPENBUGBOUNTY/%29 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

kellerbros-ford.com XSS vulnerability

Vulnerable URL: http://kellerbros-ford.com/all-inventory/index.htm?listingConfigId=AUTO-new,AUTO-used"'--!confirmOPENBUGBOUNTY...

CVE-2014-8705

PHP remote file inclusion vulnerability in editInplace.php in Wonder CMS 2014 allows remote attackers to execute arbitrary PHP code via a URL in the hook parameter...

loyalreliance.com XSS vulnerability

Open Bug Bounty ID: OBB-219252 Description| Value ---|--- Affected Website:| loyalreliance.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Information disclosure

Information exposure in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows authenticated remote attackers to obtain the existence of unauthorized files on the system via a URL parameter...

CVE-2016-8016

Information exposure in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows authenticated remote attackers to obtain the existence of unauthorized files on the system via a URL parameter...

PT-2017-1476

Name of the Vulnerable Software and Affected Versions Intel Security VirusScan Enterprise Linux VSEL version 2.0.3 and earlier McAfee VirusScan Enterprise affected versions not specified Description The issue allows authenticated remote attackers to obtain information about the existence of...

CVE-2016-8016: Exposure of Sensitive Information to an Unauthorized Actor

Information exposure in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows authenticated remote attackers to obtain the existence of unauthorized files on the system via a URL parameter...

Reflective cross-site scripting vulnerability in multiple parameters of DuoDuo Rebate System V8.3_UTF8 official version

DuoDuo rebate system is for e-commerce rebate, shopping guide to provide solutions, is the open source PHP rebate site system. DuoDuoRebate.com system V8.3UTF8 official version February 10, 2017 There is a reflective cross-site scripting vulnerability. Due to the code parameter , ddusername...

PYSEC-2017-60

Multiple open redirect vulnerabilities in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referer parameter to 1...

CVE-2015-8813

The PageLoad function in Umbraco.Web/umbraco.presentation/umbraco/dashboard/FeedProxy.aspx.cs in Umbraco before 7.4.0 allows remote attackers to conduct server-side request forgery SSRF attacks via the url parameter...

CVE-2015-8813: Server-Side Request Forgery (SSRF)

The PageLoad function in Umbraco.Web/umbraco.presentation/umbraco/dashboard/FeedProxy.aspx.cs in Umbraco before 7.4.0 allows remote attackers to conduct server-side request forgery SSRF attacks via the url parameter...

PT-2017-7478

Name of the Vulnerable Software and Affected Versions Umbraco versions prior to 7.4.0 Description The issue allows remote attackers to conduct server-side request forgery SSRF attacks. This is achieved via the url parameter in the Page Load function. There is no information provided about the...

CVE-2016-4316

Multiple cross-site scripting XSS vulnerabilities in WSO2 Carbon 4.4.5 allow remote attackers to inject arbitrary web script or HTML via the 1 setName parameter to identity-mgt/challenges-mgt.jsp; the 2 webappType or 3 httpPort parameter to webapp-list/webappinfo.jsp; the 4 dsName or 5 descriptio...

wei.merdeka.com XSS vulnerability

Vulnerable URL: http://wei.merdeka.com/play-video?=Arrayprompt/OPENBUGBOUNTY/...

research.missouri.edu XSS vulnerability

Open Bug Bounty ID: OBB-212758 Description| Value ---|--- Affected Website:| research.missouri.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-3799

A vulnerability in a URL parameter of Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to perform site redirection. More Information: CSCzu78401. Known Affected Releases: T28.1...