WebSummit: Time Based SQL injection in url parameter

There is possibility of inducing some time delay in the "url" parameter of the videos.websummit.com using the Benchmark and SQL queries, which could result in timeout for application upon huge delay induced into the application...

CVE-2015-7360

Multiple cross-site scripting XSS vulnerabilities in the Web User Interface WebUI in Fortinet FortiSandbox before 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 serial parameter to alerts/summary/profile/; the 2 urlForCreatingReport parameter to csearch/report/export/...

Open-Xchange: Cross-Site Scripting Vulnerability in dovecot.fi

Issue detail The name of an arbitrarily supplied URL parameter is copied into the value of an HTML tag attribute which is encapsulated in double quotation marks. The payload e400a"alert15bd8b was submitted in the name of an arbitrarily supplied URL parameter. This input was echoed as...

CVE-2016-3987: Improper Access Control

The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via the url parameter to 1 api/openUrlInDefaultBrowser or 2 api/showSB...

Drupal 6.x < 6.35 / 7.x < 7.35 Multiple Vulnerabilities

Binary data 9213.prm...

trotting-new.ru Open Redirect vulnerability

Vulnerable URL: http://trotting-new.ru/.go.php?url=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 2 VI...

CVE-2016-0949

Adobe Connect before 9.5.2 allows remote attackers to have an unspecified impact via a crafted parameter in a URL...

PT-2016-1220

Name of the Vulnerable Software and Affected Versions Adobe Connect versions prior to 9.5.2 Description The issue allows a remote attacker to have an unspecified impact on the system through a specially crafted parameter in a URL. Recommendations For versions prior to 9.5.2, update to version 9.5...

CVE-2016-0949: Undefined Security Weakness

Adobe Connect before 9.5.2 allows remote attackers to have an unspecified impact via a crafted parameter in a URL...

vip4.exlive.cn XSS vulnerability

Vulnerable URL: http://vip4.exlive.cn:89/gpsapp/jsp/2.jsp?serverip=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

weightwatchers.com.au Open Redirect vulnerability

Open Bug Bounty ID: OBB-119571 Description| Value ---|--- Affected Website:| weightwatchers.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

prisguide.no XSS vulnerability

Vulnerable URL: http://www.prisguide.no/goto.php?shopid=149=http://www.elkjop.no/product/HUM210WIFI/huawei-mediapad-m2-10-nettbrett-16-gb-wifi-solv"alert'XSSPOSED'...

Ovidentia maillist Module 4.0 - Remote File Inclusion

Ovidentia maillist Module 4.0 - Remote File Inclusion Not for kiddies! Download: http://www.ovidentia.org/index.php?tg=fileman&sAction=getFile&id=17&gr=Y&path=Downloads%2FAdd-ons%2FModules%2Fmaillist&file=maillist-4-0.zip&idf=794 PoC: maillist-4-0/programs/mlincl.php line 4...

OpenMRS 2.3 (1.11.4) - Local File Disclosure

OpenMRS 2.3 1.11.4 Local File Disclosure Vulnerability Vendor: OpenMRS Inc. Product web page: http://www.openmrs.org Affected version: OpenMRS 2.3, 2.2, 2.1, 2.0 Platform 1.11.4 Build 6ebcaf, 1.11.2 and 1.10.0 OpenMRS-TB System OpenMRS 1.9.7 Build 60bd9b Summary: OpenMRS is an application which...

idealwine.com XSS vulnerability

Vulnerable URL: https://www.idealwine.com/fr/lemarchesearch/okresults.jsp?fastOk=ok=asd=%22%3E%3Csvg%20onload=alert%28%27XSSPOSED%27%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

marchesifrederic.fr vulnerability

Vulnerable URL: http://www.marchesifrederic.fr/persistance/widgets/php/test-url.php?url=https://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 21.12.2015 Latest check for patch:| 21.12.2015 16:07 GMT Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

autotrader.ca XSS vulnerability

Vulnerable URL: http://www.autotrader.ca/cars/ford/f-150/?hprc=True=True=New-Used'--...

CVE-2015-5210

Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter...

CVE-2015-5210

Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter...

phpMyAdmin redirection function content spoofing vulnerability

phpmyadmin is an online management tool for MySQL databases. A security vulnerability exists in the redirection function of url.php in phpMyAdmin versions 4.4.x-4.4.15.1, 4.5.x-4.5.1. A remote attacker can perform content spoofing via the url parameter...