ecolformas.com XSS vulnerability

Open Bug Bounty ID: OBB-585415 Description| Value ---|--- Affected Website:| ecolformas.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-8732

Cross-site scripting XSS vulnerability in WampServer 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the virtualdel parameter...

Arbitrary File Deletion Vulnerability in Light CMS Version 1.7

Light CMS is an intelligent website building system built in PHP+MYSQL environment. Light CMS 1.7 version of the arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete any file within the site...

CVE-2017-9783

CVE-2017-9783 affects ProjectSend (formerly cFTP), a PHP/MySQL-based self-hosted app. A Cross-site Scripting (XSS) vulnerability exists in the Description field during a Site name update, allowing remote attackers to inject arbitrary web script or HTML. The issue is tied to commits before 6c37104...

SQL Injection Vulnerability in BEESCMS Frontend member.php and order_save.php Pages

BEESCMS is an enterprise website management system based on PHP+Mysql architecture. A SQL injection vulnerability exists in the BEESCMS frontend member.php and ordersave.php pages. An attacker can exploit the vulnerability to obtain sensitive database information...

EasySNS V1.6 Frontend Arbitrary File Download Vulnerability

ESPHP development framework based on the development of EasySNS minimalist community for the new database architecture and program structure.ESPHP is a self-developed set of PHP source code framework. EasySNS V1.6 in the program implementation of arbitrary file download vulnerability, attackers c...

AxxonSoft Axxon Next Directory Traversal Vulnerability

Axxon Next is a new generation of open platform video management software. AxxonSoft Axxon Next suffers from a directory traversal vulnerability that can be exploited by an attacker to perform directory traversal via a string in a URL...

Bugzilla 'report.cgi' Cross-Site Request Forgery Vulnerability

Bugzilla is a Web-based bug tracking system used by a large number of software projects. A cross-site request forgery vulnerability exists in 'report.cgi' in Bugzilla. An attacker could exploit this vulnerability to obtain confidential information...

CVE-2018-7205

Reflected Cross-Site Scripting vulnerability in "Design" on "Edit device layout" in Kentico 9 through 11 allows remote attackers to execute malicious JavaScript via a malicious devicename parameter in a link that is entered via the "Pages - Edit template properties - Device Layouts - Create devic...

Cisco RV132W ADSL2+ Wireless-N VPN Router and RV134W VDSL2 Wireless-AC VPN Router Remote Command Execution Vulnerability

The Cisco RV132W ADSL2+ Wireless-N VPN Routers and the RV134W VDSL2 Wireless-AC VPN Routers are both Cisco routers. A remote command execution vulnerability exists in the Cisco RV132W ADSL2+ Wireless-N VPN Router and RV134W VDSL2 Wireless-AC VPN Router. The vulnerability stems from the program's...

Magento Commerce T2 - (attr) Persistent Web Vulnerability

Document Title: =============== Magento Commerce T2 - attr Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1459 Release Date: ============= 2018-02-06 Vulnerability Laboratory ID VL-ID: ==================================== 14...

Magento Commerce T2 - (attr) Persistent Web Vulnerability

Document Title: =============== Magento Commerce T2 - attr Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1459 Release Date: ============= 2018-02-06 Vulnerability Laboratory ID VL-ID: ==================================== 14...

linuxapps12.herokuapp.com XSS vulnerability

Open Bug Bounty ID: OBB-550469 Description| Value ---|--- Affected Website:| linuxapps12.herokuapp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Stored Cross-site Scripting Vulnerability in QYKCMS Frontend lib_post.php Page

QYKCMS is a lightweight intelligent website building system based on PHP+MySql developed by QYK. A stored cross-site scripting vulnerability exists in the QYKCMS frontend libpost.php page. An attacker can insert malicious js code into the page to obtain user cookies and other information, leading...

Vulners Web Vulnerability Scanner plugin for Google Chrome v. 2.0

Vulners Team released today the second version of their Web Vulnerability Scanning plugin for Google Chrome browser. You can read my description of the version 1.0 at "Vulners.com vulnerability detection plugins for Burp Suite and Google Chrome". Killing feature of Vulners web scanner v. 2.0 is...

711cms V1.0.5 has cross-site scripting vulnerability

711cms is the first open source cms for APP application market, pc station + wap station + APP native client three stations in one, to provide a complete APP application market construction, operation and promotion of one-stop solution. A cross-site scripting vulnerability exists in version 711cm...

Arbitrary File Read Vulnerability in Rice CMS v5.5.3

DAMI CMS is a free open source, fast, simple PC station and cell phone station integration integration system, is committed to providing users with simple, fast PC station and smart phone station solutions. The version of DAMI CMS V5.5.332017-04-15 has an arbitrary file reading vulnerability, whi...

Cisco Small Business 300 and 500 Series HTTP Response Splitting Vulnerability

Cisco 350 Series Managed Switches and so on are the United States Cisco Cisco company's switch equipment.Cisco Small Business Managed Switches software is running in which a set of switch management software. An HTTP response splitting vulnerability exists in the web framework of the Cisco Small...

Reflective Cross-Site Scripting Vulnerability in DedeCMS V5.7 SP2

Weaving dream content management system DedeCms is a PHP open source website management system. A reflective cross-site scripting vulnerability exists in DedeCMS V5.7 SP2. The attacker constructs XSS statements and performs pop-up box operations to obtain user cookies and other information...

DragonByte Technologies Forumon RPG for vBulletin Cross-Site Scripting Vulnerability

DragonByte Technologies Forumon RPG for vBulletin is a forum role-playing module for vBulletin, the open-source commercial Web forum program, from DragonByte Technologies of Scotland. A cross-site scripting vulnerability exists in DragonByte Technologies Forumon RPG for vBulletin version 1.0.7. A...