CVE-2022-30119

XSS in /dashboard/reports/logs/view - old browsers only. When using Internet Explorer with the XSS protection disabled, insufficient sanitation where built urls are outputted can be exploited for Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2. This cannot be exploited in modern-da...

GetHead - HTTP Header Analysis Vulnerability Tool

gethead.py is a Python HTTP Header Analysis Vulnerability Tool. It identifies security vulnerabilities and the lack of protection in HTTP Headers. Usage: $ python gethead.py http://domain.com Changelog Version 0.1 - Initial Release Written in Python 2.7.5 Performs HTTP Header Analysis Reports...

Unfixed XSS vulnerability at egitimofis.com

Security researcher CCC, has submitted on 18/04/2009 a cross-site-scripting XSS vulnerability affecting egitimofis.com, which at the time of submission ranked 482979 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2010. It is currently...

Unfixed XSS vulnerability at www.youareblocked.net

Security researcher st@rext, has submitted on 06/03/2008 a cross-site-scripting XSS vulnerability affecting www.youareblocked.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/03/2008. It is...

Unfixed XSS vulnerability at www.historyguy.com

Security researcher zuppergazi, has submitted on 09/03/2007 a cross-site-scripting XSS vulnerability affecting www.historyguy.com, which at the time of submission ranked 468736 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/03/2007. It is...

Unfixed XSS vulnerability at www.petacatalog.org

Security researcher Darkster, has submitted on 07/08/2007 a cross-site-scripting XSS vulnerability affecting www.petacatalog.org, which at the time of submission ranked 453344 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/08/2007. It is...

Unfixed XSS vulnerability at www.workingholiday.com

Security researcher cyber, has submitted on 31/03/2007 a cross-site-scripting XSS vulnerability affecting www.workingholiday.com, which at the time of submission ranked 2500913 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/03/2007. It is...