1739 matches found
secure.madametussauds.com XSS vulnerability
Open Bug Bounty ID: OBB-200880 Description| Value ---|--- Affected Website:| secure.madametussauds.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Netgear R7000 - Cross-Site Scripting Vulnerability
Exploit for hardware platform in category web applications Exploit Title: Netgear R7000 - XSS via. DHCP hostname Date: 11-12-2016 Exploit Author: Vincent Yiu Contact: https://twitter.com/vysecurity Vendor Homepage: https://www.netgear.com/ Category: Hardware / WebApp Version: V1.0.7.21.1.93 +...
webapp.mis.vanderbilt.edu XSS vulnerability
Vulnerable URL: https://webapp.mis.vanderbilt.edu/olga/?appealCode="// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...
LocalTapiola: Multiple Reflected XSS /webApp/lahti (viestinta.lahitapiola.fi)
Vulnerable script: /webApp/lahti Vulnerable parameters: ctxvarshtml, ctxvarszoom, ctxvarsLat, ctxvarsLng PoC 1 html parameter https://blackfan.ru/localtapiola4567uytr567tre4567ytr/poc1html.html Result: html alertdocument.location PoC 2 zoom parameter...
LocalTapiola: SQL Injection /webApp/sijoitustalous_peruutus locId parameter (viestinta.lahitapiola.fi)
Vulnerable script: /webApp/sijoitustalousperuutus Vulnerable parameter: locId Database: PostgreSQL PoC 1. TRUE, substrversion,1,10='PostgreSQL', Result: Ilmoittaumisesi on peruttu...
LocalTapiola: HTML Injection in email /webApp/lahti (viestinta.lahitapiola.fi)
Steps to reproduce 1. Open link http://viestinta.lahitapiola.fi/webApp/lahti 2. Set "Etunimi" Welcome 3. Set "Sähköposti" to victim email 4. Other fields may be arbitrary 5. Submit form F134348 Result Victim receive an email from [email protected] which contains a link to a...
webapp.seo-magic.it XSS vulnerability
Vulnerable URL: http://webapp.seo-magic.it/modules/projectnumber/?jsoncallback=prompt/OPENBUGBOUNTY/...
SweetRice 1.5.1 - Arbitrary File Upload
SweetRice 1.5.1 - Arbitrary File Upload /usr/bin/python -- Coding: utf-8 -- Exploit Title: SweetRice 1.5.1 - Unrestricted File Upload Exploit Author: Ashiyane Digital Security Team Date: 03-11-2016 Vendor: http://www.basic-cms.org/ Software Link:...
SweetRice 1.5.1 - Arbitrary File Upload
/usr/bin/python -- Coding: utf-8 -- Exploit Title: SweetRice 1.5.1 - Unrestricted File Upload Exploit Author: Ashiyane Digital Security Team Date: 03-11-2016 Vendor: http://www.basic-cms.org/ Software Link: http://www.basic-cms.org/attachment/sweetrice-1.5.1.zip Version: 1.5.1 Platform: WebApp -...
SweetRice 1.5.1 File Upload
||/usr/bin/python -- Coding: utf-8 -- Exploit Title: SweetRice 1.5.1 - Unrestricted File Upload Exploit Author: Ashiyane Digital Security Team Date: 03-11-2016 Vendor: http://www.basic-cms.org/ Software Link: http://www.basic-cms.org/attachment/sweetrice-1.5.1.zip Version: 1.5.1 Platform: WebApp ...
SweetRice 1.5.1 - Arbitrary File Download
SweetRice 1.5.1 - Arbitrary File Download /usr/bin/python -- Coding: utf-8 -- Exploit Title: SweetRice 1.5.1 - Local File Inclusion Exploit Author: Ashiyane Digital Security Team Date: 03-11-2016 Vendor: http://www.basic-cms.org/ Software Link:...
SweetRice 1.5.1 Local File Inclusion Exploit
Exploit for php platform in category web applications ||/usr/bin/python -- Coding: utf-8 -- Exploit Title: SweetRice 1.5.1 - Local File Inclusion Exploit Author: Ashiyane Digital Security Team Date: 03-11-2016 Vendor: http://www.basic-cms.org/ Software Link:...
SweetRice 1.5.1 - Cross-Site Request Forgery Vulnerability
Exploit for php platform in category web applications document.forms0.submit; 0day.today 2018-01-01...
SweetRice 1.5.1 - Arbitrary File Download Exploit
Exploit for php platform in category web applications /usr/bin/python -- Coding: utf-8 -- Exploit Title: SweetRice 1.5.1 - Local File Inclusion Exploit Author: Ashiyane Digital Security Team Date: 03-11-2016 Vendor: http://www.basic-cms.org/ Software Link:...
SweetRice 1.5.1 - Arbitrary File Download
/usr/bin/python -- Coding: utf-8 -- Exploit Title: SweetRice 1.5.1 - Local File Inclusion Exploit Author: Ashiyane Digital Security Team Date: 03-11-2016 Vendor: http://www.basic-cms.org/ Software Link: http://www.basic-cms.org/attachment/sweetrice-1.5.1.zip Version: 1.5.1 Platform: WebApp - PHP ...
SweetRice 1.5.1 Local File Inclusion
||/usr/bin/python -- Coding: utf-8 -- Exploit Title: SweetRice 1.5.1 - Local File Inclusion Exploit Author: Ashiyane Digital Security Team Date: 03-11-2016 Vendor: http://www.basic-cms.org/ Software Link: http://www.basic-cms.org/attachment/sweetrice-1.5.1.zip Version: 1.5.1 Platform: WebApp - PH...
SweetRice 1.5.1 Cross Site Request Forgery
document.forms0.submit;...
SweetRice 1.5.1 - Cross-Site Request Forgery
SweetRice 1.5.1 - Cross-Site Request Forgery document.forms0.submit;...