WordPress 4.7.3 Patches Half-Dozen Vulnerabilities

WordPress released a security update on Tuesday that patched a half-dozen bugs, including one that could be chained with the recent REST API Endpoint flaw that led to a million website defacements. Given that the bug was introduced in WordPress 4.7 and the availability of a patch that backports...

waldzell.ooe.gv.at XSS vulnerability

Vulnerable URL: http://www.waldzell.ooe.gv.at/system/web/suche.aspx?search='-confirmopenbugbounty-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

travelfilmarchive.com XSS vulnerability

Vulnerable URL: http://www.travelfilmarchive.com/item.php?id=12951"';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2414966 VIP website status:| No Check travelfilmarchive.com S...

nupurdreamz.com XSS vulnerability

Vulnerable URL: http://www.nupurdreamz.com/products.php?catid=10id=2"';-- Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

bcgoldcorp.com XSS vulnerability

Vulnerable URL: http://www.bcgoldcorp.com/index.php?id=2%27%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 04.07.2017 Latest check for patch:| 04.07.2017 00:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

galpaexport.com XSS vulnerability

Vulnerable URL:...

st-martin-innkreis.ooe.gv.at XSS vulnerability

Vulnerable URL: http://www.st-martin-innkreis.ooe.gv.at/system/web/suche.aspx?search='-confirmopenbugbounty-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculate...

pupping.at XSS vulnerability

Vulnerable URL: http://www.pupping.at/system/web/suche.aspx?search='-confirmopenbugbounty-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9605449 VIP website status:| No Check...

polling-innkreis.ooe.gv.at XSS vulnerability

Vulnerable URL: http://www.polling-innkreis.ooe.gv.at/system/web/suche.aspx?search='-confirmopenbugbounty-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

girl.fimela.com XSS vulnerability

Vulnerable URL: http://girl.fimela.com/search/=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

mehrnbach.at XSS vulnerability

Vulnerable URL: http://www.mehrnbach.at/system/web/suche.aspx?search='-confirmopenbugbounty-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10097082 VIP website status:| No Check...

gautaminfra.co.in XSS vulnerability

Vulnerable URL: http://www.gautaminfra.co.in/product.php?itemid=5=hurbelift"';-- Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 15:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12056252 VIP website...

gemeinde-lembach.at XSS vulnerability

Vulnerable URL: http://www.gemeinde-lembach.at/system/web/suche.aspx?search='-confirmopenbugbounty-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9266851 VIP website status:| No...

kematen-innbach.at XSS vulnerability

Vulnerable URL: http://www.kematen-innbach.at/system/web/suche.aspx?search='-confirmopenbugbounty-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15317963 VIP website status:| No...

hofkirchen.info XSS vulnerability

Vulnerable URL: http://www.hofkirchen.info/system/web/suche.aspx?search='-confirmopenbugbounty-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

gruenburg.at XSS vulnerability

Vulnerable URL: http://www.gruenburg.at/system/web/suche.aspx?search='-confirmopenbugbounty-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

ag-ai.nl XSS vulnerability

Vulnerable URL: http://www.ag-ai.nl/zoeken.php?soortzoeken=advanced%22%3E%3Csvg/onload=confirm/openbugbounty/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3949841 VIP website...

Advanced Bus Booking Script 2.04 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Advanced Bus Booking Script v2.04 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/advanced-bus-booking-script/ Demo:...

MLM Forex Market Plan Script 2.0.1 - SQL Injection

MLM Forex Market Plan Script 2.0.1 - SQL Injection Exploit Title: MLM Forex Market Plan Script v2.0.1 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/mlm-forex-market-plan-script/ Demo:...

legalpundits.com XSS vulnerability

Vulnerable URL: http://www.legalpundits.com/search-result?q=%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E= Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 15:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...