mcart.xls Bitrix Module 6.5.2 - SQL Injection

mcart.xls Bitrix Module 6.5.2 - SQL Injection Advisory ID: HTB23279 Product: mcart.xls Bitrix module Vendor: www.mcart.ru Vulnerable Versions: 6.5.2 and probably prior Tested Version: 6.5.2 Advisory Publication: November 18, 2015 without technical details Vendor Notification: November 18, 2015...

jcsbusiness.net XSS vulnerability

Open Bug Bounty ID: OBB-123169 Description| Value ---|--- Affected Website:| jcsbusiness.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

now-sale.co.uk XSS vulnerability

Vulnerable URL: http://www.now-sale.co.uk/search.php?se=1=%22%3E%3Csvg%2Fonload%3Dprompt%28%2Fxssposed%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1349533 Google...

pancapinc.com XSS vulnerability

Open Bug Bounty ID: OBB-122404 Description| Value ---|--- Affected Website:| pancapinc.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

artexhibitionlink.com XSS vulnerability

Vulnerable URL: https://artexhibitionlink.com/expand.htm?imagename=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 19771097 Google...

spilighting.com XSS vulnerability

Vulnerable URL: http://www.spilighting.com/display/enlargement.asp?ProdName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4831111...

impact.cdd.nhs.uk Open Redirect vulnerability

Open Bug Bounty ID: OBB-121526 Description| Value ---|--- Affected Website:| impact.cdd.nhs.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

kazusa.or.jp XSS vulnerability

Vulnerable URL: http://www.kazusa.or.jp/codon/cgi-bin/srchcds.cgi Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 758854 Google Pagerank| 6 VIP website status:| No Check kazusa.or.j...

bdsouthmidlands.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-120465 Description| Value ---|--- Affected Website:| bdsouthmidlands.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bdsoutheast.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-120454 Description| Value ---|--- Affected Website:| bdsoutheast.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dynhc.altervista.org Open Redirect vulnerability

Open Bug Bounty ID: OBB-118396 Description| Value ---|--- Affected Website:| dynhc.altervista.org Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

lib.sicnu.edu.cn Open Redirect vulnerability

Open Bug Bounty ID: OBB-117961 Description| Value ---|--- Affected Website:| lib.sicnu.edu.cn Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

m.eversource.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-117833 Description| Value ---|--- Affected Website:| m.eversource.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

sd06.senate.ca.gov XSS vulnerability

Open Bug Bounty ID: OBB-117206 Description| Value ---|--- Affected Website:| sd06.senate.ca.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wiki.pandorafms.com XSS vulnerability

Open Bug Bounty ID: OBB-116708 Description| Value ---|--- Affected Website:| wiki.pandorafms.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

chinaartwindow.com.hk XSS vulnerability

Vulnerable URL: http://www.chinaartwindow.com.hk/enquiry.php?itemname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

mitsubishi.nyhanmotors.ie XSS vulnerability

Open Bug Bounty ID: OBB-116037 Description| Value ---|--- Affected Website:| mitsubishi.nyhanmotors.ie Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mitsubishi.rochfordmotors.ie XSS vulnerability

Open Bug Bounty ID: OBB-116032 Description| Value ---|--- Affected Website:| mitsubishi.rochfordmotors.ie Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hiew1.is2.byuh.edu XSS vulnerability

Open Bug Bounty ID: OBB-115512 Description| Value ---|--- Affected Website:| hiew1.is2.byuh.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

novelstars.com XSS vulnerability

Vulnerable URL: http://www.novelstars.com/default.asp?loginmessage=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15875425 Google...