Bus Booking Script 1.0 - txtname SQL Injection Vulnerability

Exploit for php platform in category web applications 0day.today 2018-01-01...

cadshop.ch XSS vulnerability

Vulnerable URL: http://www.cadshop.ch/index.php?BricsCAD=1=products=BRICSCAD=1=0=open=1=BRICSCAD=2===1%22%3E%3Csvg/onload=alert%27X-S-S%27%3E Details: Description| Value ---|--- Patched:| Yes, at 19.12.2017 Latest check for patch:| 19.12.2017 13:18 GMT Vulnerability type:| XSS Vulnerability...

medicounter.de XSS vulnerability

Vulnerable URL: https://www.medicounter.de/index.php?Hygiene%20und%20Desinfektion=1=galleryNav=open=1=237=2=237=237=1=0==1%22%3E%3Csvg/onload=alert%27X-S-S%27%3E Details: Description| Value ---|--- Patched:| Yes, at 19.12.2017 Latest check for patch:| 19.12.2017 13:19 GMT Vulnerability type:| XSS...

comcol.de XSS vulnerability

Vulnerable URL: https://www.comcol.de/index.php?Spezial-Mischungen=-1=products=51=1=0=open=16=51=2==1==1%22%3E%3Csvg/onload=alert%27X-S-S%27%3E Details: Description| Value ---|--- Patched:| Yes, at 19.12.2017 Latest check for patch:| 19.12.2017 13:19 GMT Vulnerability type:| XSS Vulnerability...

wassner.ch XSS vulnerability

Vulnerable URL: https://www.wassner.ch/index.php?page=products=1%22%3E%3Csvg/onload=alert%27X-S-S%27%3E Details: Description| Value ---|--- Patched:| Yes, at 19.12.2017 Latest check for patch:| 19.12.2017 13:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

mace90alumni.org XSS vulnerability

Vulnerable URL: http://mace90alumni.org/MemberRegistration.php?msg=%27%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

kidskountpublishing.com XSS vulnerability

Open Bug Bounty ID: OBB-453040 Description| Value ---|--- Affected Website:| kidskountpublishing.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

autoconnectholland.com XSS vulnerability

Open Bug Bounty ID: OBB-453042 Description| Value ---|--- Affected Website:| autoconnectholland.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lorenz.rssing.com XSS vulnerability

On the 13.12.2017 security researcher reported a XSS vulnerability affecting the lorenz.rssing.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 13 December, 20...

Joomla! Component JBuildozer 1.4.1 - 'appid' SQL Injection

Exploit Title: Joomla! Component JBuildozer 1.4.1 - SQL Injection Dork: N/A Date: 12.12.2017 Vendor Homepage: http://jbuildozer.com/ Software Link: https://extensions.joomla.org/extensions/extension/authoring-a-content/content-construction/jbuildozer/ Version: 1.4.1 Category: Webapps Tested on:...

farnboroughbaptist.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-451942 Description| Value ---|--- Affected Website:| farnboroughbaptist.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

rickwritzminocquafishingguide.com XSS vulnerability

Open Bug Bounty ID: OBB-451850 Description| Value ---|--- Affected Website:| rickwritzminocquafishingguide.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6...

hornseyestateagencies.com XSS vulnerability

Open Bug Bounty ID: OBB-451731 Description| Value ---|--- Affected Website:| hornseyestateagencies.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventi...

Advance Online Learning Management Script 3.1 SQL Injection

Exploit Title: Advance Online Learning Management Script 3.1 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/online-learning-management-script/ Demo: http://thavasu.com/demo/onlineeducation/ Version:...

Child Care Script 1.0 SQL Injection

Exploit Title: Child Care Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/child-care-script/ Demo: http://ordermanagementscript.com/demo/childcare/ Version: 1.0 Category: Webapps Tested on...

gerflor.asia XSS vulnerability

Vulnerable URL: http://www.gerflor.asia/search.html?search=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3824875 VIP website status:| No Coordinated...

crazymike.tw XSS vulnerability

Vulnerable URL: https://crazymike.tw/?tag=%22%3E%3CSCRIPT%3Ealert%27OPENBUGBOUNT.ORG%27%3C/SCRIPT%3E Details: Description| Value ---|--- Patched:| Yes, at 05.01.2018 Latest check for patch:| 05.01.2018 11:39 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 34985...

wardhigh.org XSS vulnerability

Vulnerable URL: http://www.wardhigh.org/apps/pages/index.jsp?uRECID=293797=dID=video=1ID=78316%22--!%3E%3CSvg/OnLoad=confirmdocument.domain%3E%22 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

alemany.org XSS vulnerability

Vulnerable URL: https://www.alemany.org/apps/pages/index.jsp?uRECID=236563=dID=video=1ID=56259%22--!%3E%3CSvg/OnLoad=confirmdocument.domain%3E%22 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1771281 VIP websit...

tomi.wang XSS vulnerability

Open Bug Bounty ID: OBB-451133 Description| Value ---|--- Affected Website:| tomi.wang Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...