Information disclosure

IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904...

CVE-2017-1225

IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904...

CVE-2017-1225

IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904...

CVE-2017-1225

IBM Tivoli Endpoint Manager IBM BigFix Platform 9.2 and 9.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123904...

CVE-2017-1225

CVE-2017-1225 affects IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.2.x before 9.2.12 and 9.5.x before 9.5.7. The issue is information disclosure caused by sensitive data in URL parameters, which can be exposed via server logs, referrer headers, or browser history. Remediation suggeste...

Cross-Site Scripting (XSS)

woocommerce is vulnerable to cross-site scripting XSS attacks. The attacks can be launched because URL parameters are not escpaed properly...

Generic HTTP Directory Traversal / File Inclusion (Web Application URL Parameter) - Active Check

Generic check for HTTP directory traversal / file inclusion vulnerabilities within URL parameters of the remote web application. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2017-8896

ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2 are vulnerable to XSS on error pages by injecting code in url parameters...

Design/Logic Flaw

ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2 are vulnerable to XSS on error pages by injecting code in url parameters...

CVE-2017-8896

ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2 are vulnerable to XSS on error pages by injecting code in url parameters...

CVE-2017-8896

CVE-2017-8896 affects ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2. The vulnerability is a cross-site scripting (XSS) on error pages caused by injecting code in URL parameters. The issue is limited to error-page rendering and is triggered when u...

procarenetwork.com XSS vulnerability

Vulnerable URL: http://www.procarenetwork.com/default.asp?Network=TravelEntertainment=Page4=2=Vacation%20Experts=10=Vacation%20Experts=Vacation%20Experts=1"...

cimbor.net XSS vulnerability

Vulnerable URL: https://cimbor.net/user/browse/ ?searchgender=gender from=from to=to country=countryalert'OPENBUGBOUNTY'...

CVE-2016-5959

IBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 116136...

CVE-2016-5959

CVE-2016-5959 affects IBM Security Privileged Identity Manager (ISPIM) versions 2.0.2 and 2.1.0. The root cause is that the product stores sensitive information in URL parameters, creating a risk of information disclosure if URLs are captured in server logs, the referrer header, or browser histor...

FeiWa B2B2C mall system url parameter has remote file inclusion vulnerability

Flying Frog Mall System FeiWa B2B2C is an enterprise-level B2B2C e-commerce platform system, fully supporting PC, WAP, WeChat, APP and other terminal equipment. FeiWa B2B2C mall system url parameters exist remote file containment vulnerability. The vulnerability exists in the location "...

Harvest: [platform.harvestapp.com] Reflected XSS in Error Message via URL parameters

Hi @jorgeleria, I came across a potential reflected XSS vector while exploring platform.harvestapp.com functionality. At present, I have been unable to locate a functional payload, so would like to report this as HTML injection. Proof of Concept Steps to reproduce 1. Visit the below Demonstration...

CVE-2017-5158

An Information Exposure issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. Credentials may be exposed to external systems via specific URL parameters, as arbitrary destination addresses may be specified...

Information disclosure

An Information Exposure issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. Credentials may be exposed to external systems via specific URL parameters, as arbitrary destination addresses may be specified...

CVE-2017-5158

An Information Exposure issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. Credentials may be exposed to external systems via specific URL parameters, as arbitrary destination addresses may be specified...