Vastal I-Tech Dating Zone 0.9.9 SQL Injection

Exploit Title: Vastal I-Tech Dating Zone 0.9.9 - 'productid' Parameter SQL Injection Dork: N/A Date: 29.09.2017 Vendor Homepage: http://vastal.com/ Software http://vastal.com/dating-zone-the-dating-software.html Demo: http://datingzone.vastal.com/demo/ Version: 0.9.9 Category: Webapps Tested on:...

provadia.bg XSS vulnerability

Vulnerable URL: http://www.provadia.bg/procprovadia.php?id=13'"118 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5230625 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

goodrx.com XSS vulnerability

Vulnerable URL: https://www.goodrx.com/pill-identifier/search?filter-color=blue&filter-shape;=lol=open" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 19329 VIP website status:| Yes Coordinated Disclosure...

store.trxtraining.com XSS vulnerability

Vulnerable URL: https://store.trxtraining.com/search.php?searchquery=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

inec.pt XSS vulnerability

Vulnerable URL: http://inec.pt/?pag=comunes%2Fpaginas%2Fsearch〈=pt=nombre=ref=%27%22%3E%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

werkstatt-der-kulturen.de XSS vulnerability

Vulnerable URL: http://werkstatt-der-kulturen.de/de/suche/?suchtext=%22%2F%3E%27%3E%22%3EI%3Ci%3EI%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E=Suche Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

hyserve.com XSS vulnerability

Vulnerable URL: https://hyserve.com/basket.php?lang=de%27%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3647976 VIP website status:| N...

hl7de.art-decor.org XSS vulnerability

Vulnerable URL: http://hl7de.art-decor.org/index.php?prefix=hl7de-%27%22%3E%3Cimg%20src=x%20onerror=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 06.10.2017 Latest check for patch:| 06.10.2017 07:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

msbbooks.in XSS vulnerability

Vulnerable URL: http://www.msbbooks.in/productlist.php?keywork=%27%22%3E%3Csvg%2Fonload%3Dconfirm%28%2FOPENBUGBOUNTY%2F%29%3E=27=11 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

showme.com XSS vulnerability

Vulnerable URL: http://www.showme.com/search?q= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 88190 VIP website status:| No Coordinated Disclosure Timeline: Description| Value...

erboristeriaetnea.com XSS vulnerability

Vulnerable URL: http://www.erboristeriaetnea.com/resultsearch.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10739738 VIP website status:| No Coordinated Disclosure Timeline:...

trafficnetzwerk.de XSS vulnerability

Vulnerable URL: http://trafficnetzwerk.de/forgot.password.php Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 672791 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerabili...

postel-deluxe.ru XSS vulnerability

Vulnerable URL: http://postel-deluxe.ru/vanna/kovriki-vannaia.html?p=3%22%3E%3Cscript%3Ealert/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 97203 VIP...

stadtbranche.at XSS vulnerability

Vulnerable URL: http://stadtbranche.at/s/sdfsdf/sdsdf/%22'%20Style=position:fixed;top:0;left:0;font-size:999px;%20OnMouseEnter=confirm%60openbugbounty%60%20// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:|...

tsd.org.sy XSS vulnerability

Vulnerable URL: http://tsd.org.sy/indexen.php?cat=search=%22%3E%3Csvg/onload%3Dalert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websit...

directory.uwa.edu.au XSS vulnerability

Vulnerable URL: http://directory.uwa.edu.au////search?fields=simple=search="=both=person=incl=both Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12651 VIP website status:| Yes...

hensel-electric.de XSS vulnerability

Open Bug Bounty ID: OBB-317103 Description| Value ---|--- Affected Website:| hensel-electric.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

taxmanagementindia.com XSS vulnerability

Vulnerable URL: https://www.taxmanagementindia.com/search/tmisearch.asp?text=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 54973 VIP website...

mediacast.madisoncity.k12.al.us XSS vulnerability

Vulnerable URL: https://mediacast.madisoncity.k12.al.us/login.cfm?message=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

mastersfantasyfootballleagues.com XSS vulnerability

Vulnerable URL: https://mastersfantasyfootballleagues.com/userlogin.php?message=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 998046 VIP...