spinmaster.com XSS vulnerability

Open Bug Bounty ID: OBB-255903 Description| Value ---|--- Affected Website:| spinmaster.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

upgproductregistration.com XSS vulnerability

Vulnerable URL: http://www.upgproductregistration.com/default.asp?Brand=1"...

just-training.co.uk XSS vulnerability

Vulnerable URL: http://www.just-training.co.uk/3/index.php/bite-size-training?PageID=1"...

sport.tv2.dk XSS vulnerability

Vulnerable URL: http://sport.tv2.dk/cykling/2017-06-28-dm-guldvinder-far-reprimande-for-positiv-dopingtest/'-alert'OPENBUGBOUNTY'-' Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:01 GMT Vulnerability type:| XSS Vulnerability status:| Public...

vivax-assist.com XSS vulnerability

Vulnerable URL: http://www.vivax-assist.com/it/index.php/%22%3E%3Csvg/onload=%22alert'OPENBUGBOUNTY'%22%3E Details: Description| Value ---|--- Patched:| Yes, at 11.07.2017 Latest check for patch:| 11.07.2017 14:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

turismevallesoccidental.cat XSS vulnerability

Vulnerable URL: http://www.turismevallesoccidental.cat/ctvoc/rcturistics/index.php?apartat=1"...

caymangoodtaste.com XSS vulnerability

Open Bug Bounty ID: OBB-255483 Description| Value ---|--- Affected Website:| caymangoodtaste.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lannoo.be XSS vulnerability

Vulnerable URL: https://www.lannoo.be/nl/search-results?searchapiviewsfulltext=xss%27%3C%2Fdiv%3E%3Csvg%2Fonload%3Dprompt%28/OPENBUGBOUNTY/%29%3Ecategories=Allcategoriesmarked=Allby=searchapirelevance Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.09.2017 Vulnerabili...

couteaux-berthier.com XSS vulnerability

Open Bug Bounty ID: OBB-255362 Description| Value ---|--- Affected Website:| couteaux-berthier.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

asomi.youclip.mobi XSS vulnerability

Vulnerable URL: http://asomi.youclip.mobi/search/index.xhtml?keyword=%22%3E%3Csvg%20onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

editionslesliensquiliberent.fr XSS vulnerability

Vulnerable URL: http://www.editionslesliensquiliberent.fr/index.php?page=recherche Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1556991 VIP website status:| No Check...

frieslandagenda.nl XSS vulnerability

Open Bug Bounty ID: OBB-255279 Description| Value ---|--- Affected Website:| frieslandagenda.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

uncut.at XSS vulnerability

Vulnerable URL: https://www.uncut.at/home/suche.php Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 15:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 332006 VIP website status:| No Check uncut.at SSL...

polizeinews.ch XSS vulnerability

Vulnerable URL: http://www.polizeinews.ch/suche/?s=%22%3E%27%3Ew%3Ci%3E5%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 310183 VI...

ipg-versteigerungen.at XSS vulnerability

Vulnerable URL: http://ipg-versteigerungen.at/suchergebnis.php?Suche=%22%3E%27%3Ew%3Ci%3E5%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 08:58 GMT Vulnerability type:| XSS Vulnerability...

2sweb.ir XSS vulnerability

Vulnerable URL: http://2sweb.ir/?s=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 75097 VIP website status:| N...

dicodesrimes.com XSS vulnerability

Vulnerable URL: http://www.dicodesrimes.com/rime/+%22%3E%3Cscript%3Ealert'OPENBUGBOUNTY'%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 183511 VIP website status:| No...

institutmontaigne.org XSS vulnerability

Vulnerable URL: http://www.institutmontaigne.org/presidentielle-2017/recherche/ Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 08:57 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 328374 VIP website status:|...

Starbucks: Possible SOP bypass in www.starbucks.com due to insecure crossdomain.xml

Hello. I was penetration testing your website, and noticed that your crossdomain.xml file allowed many sites access. I went through and, for all the sites that had .website.com with them, I scanned them for subdomains. I found that a subdomain for ███████.com a site in your crossdomain.xml as...

dwsec-id.com XSS vulnerability

Vulnerable URL: http://www.dwsec-id.com/hmpg/newsRsrch/rsrch/analDtlR.do?ctnsClasCd=01202"'--!=8630=1=N=Ace Hardware Indonesia A...=05=2017=01001305& Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...