cars.brick7.co.za XSS vulnerability

Open Bug Bounty ID: OBB-49202 Description| Value ---|--- Affected Website:| cars.brick7.co.za Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

bacau.inoras.ro XSS vulnerability

Open Bug Bounty ID: OBB-48601 Description| Value ---|--- Affected Website:| bacau.inoras.ro Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

vidmark.se XSS vulnerability

Open Bug Bounty ID: OBB-48450 Description| Value ---|--- Affected Website:| vidmark.se Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

jurnal.unmul.ac.id XSS vulnerability

Open Bug Bounty ID: OBB-47601 Description| Value ---|--- Affected Website:| jurnal.unmul.ac.id Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

web.educastur.princast.es XSS vulnerability

Open Bug Bounty ID: OBB-46955 Description| Value ---|--- Affected Website:| web.educastur.princast.es Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventio...

www15.gencat.cat XSS vulnerability

Open Bug Bounty ID: OBB-46888 Description| Value ---|--- Affected Website:| www15.gencat.cat Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CMS iCAT Cross Site Scripting

Cross Site Scripting on CMS iCAT Risk: Low CWE number: CWE-79 Date: 15/04/2014 Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: /index.php Exploit: http://host/index.php?seite=xss PoC: - Target: partner.ruegg-cheminee.com - Vuln. File:...

FlashComs Chat Script File Upload

"@".$options'f'."","fileId" = $options"f"; $result = curlexec$handle; ifstrpos$result,"UPLOADSUCCESS" echo "\n\n"; echo "\t+ Exploitation success!!\n"; echo "\t+ http://$optionsu/files/$optionsf\n"; echo "...

FlashComs Chat 6.5 - Arbitrary File Upload

"@".$options'f'."","fileId" = $options"f"; $result = curlexec$handle; ifstrpos$result,"UPLOADSUCCESS" echo "\n\n"; echo "\t+ Exploitation success!!\n"; echo "\t+ http://$optionsu/files/$optionsf\n";...

Unfixed XSS vulnerability at medienkunstpreis.zkm.de

Security researcher owege, has submitted on 14/02/2012 a cross-site-scripting XSS vulnerability affecting medienkunstpreis.zkm.de, which at the time of submission ranked 340654 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...

Unfixed XSS vulnerability at www.thescreamingorphans.com

Security researcher nullbyt3, has submitted on 19/03/2011 a cross-site-scripting XSS vulnerability affecting www.thescreamingorphans.com, which at the time of submission ranked 7923564 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011...

Luch Web Designer - Multiple SQL Injections

Title : Web Designed by LUCH Vulnerable to SQL Injection Vendor : http://www.luch.co.il Found by: p0pc0rn SQL --- http://site.com/page.asp?id=SQL http://site.com/cat.asp?catid=SQL http://site.com/catin.asp?productid=SQL POC --- http://site.com/page.asp?id=23 union select 1 from test.a...

Multiple Cross-site Scripting (XSS) Vulnerabilities in allinta CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in allinta CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in allinta CMS 1.1 The vulnerability exists due to input sanitation error in the "langURL"...

Unfixed XSS vulnerability at arcadegogo.com

Security researcher beyrut-KaI3uS, has submitted on 25/07/2010 a cross-site-scripting XSS vulnerability affecting arcadegogo.com, which at the time of submission ranked 7935732 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/03/2011. It is...

Cross-site Scripting (XSS) Vulnerability in SiteLoom CMS

High-Tech Bridge SA Security Research Lab has discovered vulnerability in SiteLoom CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in SiteLoom CMS The vulnerability exists due to input sanitation error in the "mailform1" parameter in...

Multiple Vulnerabilities in Pixie

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Pixie which could be exploited to perform cross-site scripting, script insertions and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in Pixie The vulnerability exists due to input...

Unfixed XSS vulnerability at www.leeuwarden.nl

Security researcher i1337, has submitted on 07/06/2009 a cross-site-scripting XSS vulnerability affecting www.leeuwarden.nl, which at the time of submission ranked 721789 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is current...

Virtue Book Store - 'cid' SQL Injection

CMS : Online Book Store WEB : http://www.virtuenetz.com/book/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : Ejemplo : undersec@Undersec:/Escritorio$ php exploit.php http://www.virtuenetz.com/book/ ID :1 Usuari...

Unfixed XSS vulnerability at www.agirprostitution.lautre.net

Security researcher CrashOver, has submitted on 13/12/2008 a cross-site-scripting XSS vulnerability affecting www.agirprostitution.lautre.net, which at the time of submission ranked 145292 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.dailynorthwestern.com

Security researcher xylitol, has submitted on 11/11/2008 a cross-site-scripting XSS vulnerability affecting www.dailynorthwestern.com, which at the time of submission ranked 491191 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It ...