caymangoodtaste.com XSS vulnerability

Open Bug Bounty ID: OBB-255483 Description| Value ---|--- Affected Website:| caymangoodtaste.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lannoo.be XSS vulnerability

Vulnerable URL: https://www.lannoo.be/nl/search-results?searchapiviewsfulltext=xss%27%3C%2Fdiv%3E%3Csvg%2Fonload%3Dprompt%28/OPENBUGBOUNTY/%29%3Ecategories=Allcategoriesmarked=Allby=searchapirelevance Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.09.2017 Vulnerabili...

couteaux-berthier.com XSS vulnerability

Open Bug Bounty ID: OBB-255362 Description| Value ---|--- Affected Website:| couteaux-berthier.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

asomi.youclip.mobi XSS vulnerability

Vulnerable URL: http://asomi.youclip.mobi/search/index.xhtml?keyword=%22%3E%3Csvg%20onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

editionslesliensquiliberent.fr XSS vulnerability

Vulnerable URL: http://www.editionslesliensquiliberent.fr/index.php?page=recherche Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1556991 VIP website status:| No Check...

frieslandagenda.nl XSS vulnerability

Open Bug Bounty ID: OBB-255279 Description| Value ---|--- Affected Website:| frieslandagenda.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

uncut.at XSS vulnerability

Vulnerable URL: https://www.uncut.at/home/suche.php Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 15:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 332006 VIP website status:| No Check uncut.at SSL...

polizeinews.ch XSS vulnerability

Vulnerable URL: http://www.polizeinews.ch/suche/?s=%22%3E%27%3Ew%3Ci%3E5%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 310183 VI...

ipg-versteigerungen.at XSS vulnerability

Vulnerable URL: http://ipg-versteigerungen.at/suchergebnis.php?Suche=%22%3E%27%3Ew%3Ci%3E5%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 08:58 GMT Vulnerability type:| XSS Vulnerability...

2sweb.ir XSS vulnerability

Vulnerable URL: http://2sweb.ir/?s=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 75097 VIP website status:| N...

dicodesrimes.com XSS vulnerability

Vulnerable URL: http://www.dicodesrimes.com/rime/+%22%3E%3Cscript%3Ealert'OPENBUGBOUNTY'%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 183511 VIP website status:| No...

institutmontaigne.org XSS vulnerability

Vulnerable URL: http://www.institutmontaigne.org/presidentielle-2017/recherche/ Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 08:57 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 328374 VIP website status:|...

Starbucks: Possible SOP bypass in www.starbucks.com due to insecure crossdomain.xml

Hello. I was penetration testing your website, and noticed that your crossdomain.xml file allowed many sites access. I went through and, for all the sites that had .website.com with them, I scanned them for subdomains. I found that a subdomain for ███████.com a site in your crossdomain.xml as...

dwsec-id.com XSS vulnerability

Vulnerable URL: http://www.dwsec-id.com/hmpg/newsRsrch/rsrch/analDtlR.do?ctnsClasCd=01202"'--!=8630=1=N=Ace Hardware Indonesia A...=05=2017=01001305& Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

berakgame.indo7soft.com XSS vulnerability

Vulnerable URL: http://berakgame.indo7soft.com/product.php?searchflag=1categoryid=1"'--!subcategoryid=15categorycolourid=salestatus=newstatus=weeklyspecialstatus=newarrivalperiod=search=genreid= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.08.2017 Vulnerability...

indiabookstore.net XSS vulnerability

Vulnerable URL: https://www.indiabookstore.net/search?q= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 204488 VIP website status:| No Check indiabookstore.net SSL connection:|...

grupodeempleo.es Open Redirect vulnerability

Vulnerable URL: http://grupodeempleo.es/click.php?url=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.08.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 12349356 VIP website status:| No Check...

quarterhorses.mobi Open Redirect vulnerability

Vulnerable URL: http://quarterhorses.mobi/redirect.asp?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.09.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websi...

vejr.tv2.dk XSS vulnerability

Vulnerable URL: http://vejr.tv2.dk/vejr/odense-2615876/%3C/script%3E%3Csvg/onload=prompt%60openbugbounty%60%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...

livsstil.tv2.dk XSS vulnerability

Vulnerable URL: http://livsstil.tv2.dk/sundhed/2017-06-29-soennen-havnede-paa-operationsstue-nu-advarer-mor-mod-groentsag/%3C/script%3E%3Csvg/onload=prompt%60openbugbounty%60%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclose...