information4766.rssing.compunnaiah.rssing.com XSS vulnerability

On the 01.11.2017 security researcher reported a XSS vulnerability affecting the information4766.rssing.compunnaiah.rssing.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open...

portal.nersc.gov XSS vulnerability

Vulnerable URL: http://portal.nersc.gov/project/m1758/hepsim/search.php?search=%27%22%2F%3E%3Cscript%3Ealert%28%2FOPENBUGBOUNTY%2F%29%3B%3C%2Fscript%3E=Search Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

johnlewis.com XSS vulnerability

Open Bug Bounty ID: OBB-378794 Description| Value ---|--- Affected Website:| johnlewis.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

snapfish.co.nz XSS vulnerability

Vulnerable URL: https://www.snapfish.co.nz/2/home?cid=tbm...

danceofstreet.lv XSS vulnerability

Vulnerable URL: http://www.danceofstreet.lv/price.php?id=8%22%3E%3Csvg%3E%3Cscript%3E/%3C@/%3Eprompt/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6824640 VIP website status:| No...

moderne-dementiezorg.nl XSS vulnerability

Vulnerable URL: http://www.moderne-dementiezorg.nl/films.php?id=22%22%3E%3Csvg%3E%3Cscript%3E/%3C@/%3Eprompt/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6430135 VIP website status:...

halfwayhouses.us XSS vulnerability

Vulnerable URL: http://www.halfwayhouses.us/city.php?city=Petersburg%22%27--!%3E%3C/Title/%3C/Style/%3C/Script/%3C/c/%3C/Noscript/%3C/Pre/%3C/Xmp%3E%3CBody/OnPageShow=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 30.10.2017 Latest check for patch:| 30.10.2017 20:...

voucherhoney.co.uk XSS vulnerability

Vulnerable URL: https://www.voucherhoney.co.uk/se/%2522%253E%2527%253EI%253Ci%253EI%253Csvg%252Fonload%253Dalert%2528%252Fopenbugbounty%252F%2529%253E.html Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 145764 V...

Website Broker Script - 'status_id' SQL Injection

Exploit Title: Website Broker Script - 'statusid' Parameter SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link: http://www.exclusivescript.com/product/UwCG4464436/php-scripts/website-broker-script Demo:...

Website Broker Script - status_id SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Website Broker Script - 'statusid' Parameter SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link:...

Gratipay: Bypassing X-frame options

bypass X-Frame-Options Proxy protection NOT used DomainUsing: gratipay.com Proxy protection NOT used , i can bypass X-Frame-Options header and recreate clickjacking on the whole domain. I see that you don't have a reverse proxy protection this allows all users to proxy your website rather than...

sportbuy.ir XSS vulnerability

Open Bug Bounty ID: OBB-375996 Description| Value ---|--- Affected Website:| sportbuy.ir Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

didongthongminh.vn XSS vulnerability

Vulnerable URL: http://didongthongminh.vn/?lang=%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.11.2017 Latest check for patch:| 28.11.2017 10:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 82804 VIP...

newater.uni-osnabrueck.de XSS vulnerability

Vulnerable URL: http://www.newater.uni-osnabrueck.de/index.php?pid=search Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

canlihddizi.net XSS vulnerability

Vulnerable URL: http://www.canlihddizi.net/?s=%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure...

armurerie-lavaux.com XSS vulnerability

Open Bug Bounty ID: OBB-370351 Description| Value ---|--- Affected Website:| armurerie-lavaux.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

chicago-wedding-officiant.com XSS vulnerability

Open Bug Bounty ID: OBB-369619 Description| Value ---|--- Affected Website:| chicago-wedding-officiant.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

easyfairs.com XSS vulnerability

Vulnerable URL: http://www.easyfairs.com/search/%22%3E%3Cimg%20src=x%20onerror=prompt%22OPENBUGBOUNTY%22%3E/ Details: Description| Value ---|--- Patched:| Yes, at 07.11.2017 Latest check for patch:| 07.11.2017 17:24 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

jozan.net XSS vulnerability

Vulnerable URL: http://www.jozan.net/oriental-rugs/?Category=%22%3E%3CScRipT%3Ealert%28%22XSS%20-%20by.%20Drok3r%22%29%3C%2FScrIpT%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2697119 VIP website status:| N...

keygens.pro XSS vulnerability

Open Bug Bounty ID: OBB-365811 Description| Value ---|--- Affected Website:| keygens.pro Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...