Open-Xchange: No session expiry after log-out and session id exposed in URL

Hi, There is no session expiry after log-out which can help an attacker to take-over the full account by reusing it. The JSESSIONID which is vulnerable can be used unlimited times even after the password change. The server will keep on creating an unlimited number of sessions after each log-in...

jimejinak.cz XSS vulnerability

Open Bug Bounty ID: OBB-692258 Description| Value ---|--- Affected Website:| jimejinak.cz Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

poleressources95.org XSS vulnerability

Open Bug Bounty ID: OBB-686272 Description| Value ---|--- Affected Website:| poleressources95.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

n11.com XSS vulnerability

Open Bug Bounty ID: OBB-685269 Description| Value ---|--- Affected Website:| n11.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

alpenverein-gapa.de XSS vulnerability

Open Bug Bounty ID: OBB-684014 Description| Value ---|--- Affected Website:| alpenverein-gapa.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

catphones.com XSS vulnerability

Open Bug Bounty ID: OBB-682972 Description| Value ---|--- Affected Website:| catphones.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

peterhahn.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-682803 Description| Value ---|--- Affected Website:| peterhahn.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

varolcadir.com.tr XSS vulnerability

Open Bug Bounty ID: OBB-682429 Description| Value ---|--- Affected Website:| varolcadir.com.tr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

carloshilsdorf.com.br XSS vulnerability

Open Bug Bounty ID: OBB-682248 Description| Value ---|--- Affected Website:| carloshilsdorf.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

spilling.de XSS vulnerability

Open Bug Bounty ID: OBB-681852 Description| Value ---|--- Affected Website:| spilling.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

transfermarkt.scot XSS vulnerability

Open Bug Bounty ID: OBB-681278 Description| Value ---|--- Affected Website:| transfermarkt.scot Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

northwestern.flintbox.com XSS vulnerability

Open Bug Bounty ID: OBB-680245 Description| Value ---|--- Affected Website:| northwestern.flintbox.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

brianlinkletter.com XSS vulnerability

Open Bug Bounty ID: OBB-679870 Description| Value ---|--- Affected Website:| brianlinkletter.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nobodyschild.com XSS vulnerability

Open Bug Bounty ID: OBB-679656 Description| Value ---|--- Affected Website:| nobodyschild.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

laabuelacarmen.com XSS vulnerability

Open Bug Bounty ID: OBB-679593 Description| Value ---|--- Affected Website:| laabuelacarmen.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kubus-translations.com XSS vulnerability

Open Bug Bounty ID: OBB-679557 Description| Value ---|--- Affected Website:| kubus-translations.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nigerianeconomicsociety.org XSS vulnerability

Open Bug Bounty ID: OBB-679508 Description| Value ---|--- Affected Website:| nigerianeconomicsociety.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

newquayvoice.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-678679 Description| Value ---|--- Affected Website:| newquayvoice.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

news.construiracier.fr XSS vulnerability

Open Bug Bounty ID: OBB-678682 Description| Value ---|--- Affected Website:| news.construiracier.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kr.mource.com XSS vulnerability

Open Bug Bounty ID: OBB-678656 Description| Value ---|--- Affected Website:| kr.mource.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...