Multiplex Movie Theater Booking Script 3.1.5 - 'moid' / 'eid' SQL Injection

Exploit Title: Multiplex Movie Theater Booking Script 3.1.5 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/multiplex-theater-booking-script/ Version: 3.1.5 Category: Webapps Tested on:...

Responsive Realestate Script 3.2 - property-list?tbud SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Responsive Realestate Script 3.2 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/responsive-realestate-script/ Version: 3.2...

Realestate Crowdfunding Script 2.7.2 - pid SQL Injection

Realestate Crowdfunding Script 2.7.2 - pid SQL Injection Exploit Title: Realestate Crowdfunding Script 2.7.2 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/realestate-crowdfunding-script/ Demo:...

fishgon.com XSS vulnerability

Vulnerable URL: https://www.fishgon.com/search/find?buscadordonde=%3C/script%3E%3E%3Cscript%3Eprompt1%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2808273 VIP website status:| No Coordinated...

rudolph-office.de XSS vulnerability

Vulnerable URL: http://rudolph-office.de/suncms.php?siteId=%22%3E%3Csvg%3E%3Cscript%3E/%3C@/%3Eprompt/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websi...

doriane-bijoux.com XSS vulnerability

Open Bug Bounty ID: OBB-447880 Description| Value ---|--- Affected Website:| doriane-bijoux.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

showvivor.santaanita.com XSS vulnerability

Open Bug Bounty ID: OBB-447814 Description| Value ---|--- Affected Website:| showvivor.santaanita.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventio...

ravelist.com Open Redirect vulnerability

On the 03.12.2017 security researcher reported a Open Redirect vulnerability affecting the ravelist.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 3 December...

98moviees.xyz XSS vulnerability

Vulnerable URL: http://www.98moviees.xyz/?s=%22%3E%3Csvg%2Fonload%3Dconfirm%2FOPENBUGBOUNTY%2F%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1356269 VIP website status:| No Coordinated Disclosure Timeline:...

kyangyhe.com XSS vulnerability

Vulnerable URL: http://www.kyangyhe.com/en/search/index.html?q=%E2%80%9C/%3E%E2%80%99%3E/%3E%3E%22%3E%3Cimg%20src=1%20onerror=promptdocument.domain;%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8965910 VIP...

gistest.gouda.nl XSS vulnerability

Open Bug Bounty ID: OBB-440657 Description| Value ---|--- Affected Website:| gistest.gouda.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sportregion-stuttgart.de XSS vulnerability

Vulnerable URL: http://www.sportregion-stuttgart.de/index.php?tacoma=webpart.pages.TacomaDynamicPage=4086=4086&=%22%3E%3Csvg%3E%3Cscript%3E/%3C@/%3Eprompt/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 01.12.2017 Latest check for patch:| 01.12.2017 19:26 GMT...

akku-king.net XSS vulnerability

Vulnerable URL: https://www.akku-king.net/top Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 859022 VIP website status:| No Coordinated Disclosure Timeline: Description| Value...

SQL Injection Vulnerability in Website Construction System of Anyang Zhidao Media Co.

Anyang Zhidao Media Co., Ltd. is a network company engaged in Internet business and software development, providing domain name registration, website construction, website hosting, website maintenance, website revision, network promotion, enterprise post office, call center and other full set of...

agedcarereviews.com.au XSS vulnerability

Open Bug Bounty ID: OBB-435930 Description| Value ---|--- Affected Website:| agedcarereviews.com.au Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

infoagro.com XSS vulnerability

Vulnerable URL: http://infoagro.com/varios/mailme.asp Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 86227 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability...

scsu.edu XSS vulnerability

On the 18.11.2017 security researcher reported a XSS vulnerability affecting the scsu.edu website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 18 November, 2017 07:31...

ko.net.ua XSS vulnerability

Open Bug Bounty ID: OBB-417424 Description| Value ---|--- Affected Website:| ko.net.ua Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

escuelasdigitalescampesinas.org XSS vulnerability

Open Bug Bounty ID: OBB-417402 Description| Value ---|--- Affected Website:| escuelasdigitalescampesinas.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

limasollunaci.com XSS vulnerability

Open Bug Bounty ID: OBB-417089 Description| Value ---|--- Affected Website:| limasollunaci.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...