WordPress Plugin Apptha Slider Gallery 1.0 - SQL Injection

Exploit Title: WordPress Plugin Apptha Slider Gallery v1.0 - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software: https://www.apptha.com/category/extension/Wordpress/apptha-slider-gallery Demo: http://www.apptha.com/demo/apptha-slider-gallery Version:...

PHP Matrimonial Script 3.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Matrimonial Script v3.0 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/matrimonial-script/ Demo:...

Responsive Events Movie Ticket Booking Script - SQL Injection

Responsive Events Movie Ticket Booking Script - SQL Injection Exploit Title: Responsive Events & Movie Ticket Booking Script - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software :...

Schools Alert Management Script 2.01 - 'list_id' SQL Injection

Exploit Title: Schools Alert Management Script v2.01 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/schools-alert-management-system/ Demo: http://www.schoolcollageerp.com/schoolalert/ Version: 2.01...

PHPCMS 'index.php' page has SQL injection vulnerability

PHPCMS is a website management software. The software adopts modular development and supports a variety of classification methods, using it can easily realize the design, development and maintenance of personalized websites. PHPCMS 'index.php' page has a SQL injection vulnerability, which can be...

Joomla Recipe Manager 2.2 SQL Injection

Exploit Title: Joomla! Component Recipe Manager v2.2 - SQL Injection Google Dork: inurl:index.php?option=comrecipe Date: 02.03.2017 Vendor Homepage: http://joomla6teen.com/ Software: https://extensions.joomla.org/extensions/extension/vertical-markets/thematic-directory/recipe-manager/ Demo:...

CVE-2017-6397

An issue was discovered in FlightAirMap v1.0-beta.10. The vulnerability exists due to insufficient filtration of user-supplied data in multiple parameters passed to several -sub-menu.php pages. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable...

binakonstruksi.pu.go.id XSS vulnerability

Vulnerable URL: http://binakonstruksi.pu.go.id/v2/portal2/user/view.php?keyword=bpsprov=bpskabkota=balai===bidang=3kualifikasi==klasifikasi==pelatihanuserview=10prov=balai===Cipta Karya⊂=pelatihanprompt/OPENBUGBOUNTY/...

birji-truda.ru Open Redirect vulnerability

Vulnerable URL: http://www.birji-truda.ru/go.html?http://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 10388546 VIP website status:| No Check...

bcpetsearch.com XSS vulnerability

Vulnerable URL: http://bcpetsearch.com/search/?advanced=1='"--!confirmOPENBUGBOUNTY...

oir-krugosvetka.friday.ru XSS vulnerability

Open Bug Bounty ID: OBB-213496 Description| Value ---|--- Affected Website:| oir-krugosvetka.friday.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

simhecny.malogoszcz.info XSS vulnerability

Vulnerable URL: http://www.simhecny.malogoszcz.info/humor.php/%27"--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

brive.brit-hotel.fr XSS vulnerability

Vulnerable URL: http://brive.brit-hotel.fr/mapframe.php?lat=;...

carre-blanc.brithotel.fr XSS vulnerability

Vulnerable URL: http://carre-blanc.brithotel.fr/mapframe.php?lat=;...

evreux.brit-hotel.fr XSS vulnerability

Vulnerable URL: http://evreux.brit-hotel.fr/mapframe.php?lat=;...

pullmangallery.com XSS vulnerability

Vulnerable URL: http://pullmangallery.com/viewitem.php?cat=42"';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3944288 VIP website status:| No Check pullmangallery.com SSL...

opendi.se XSS vulnerability

Vulnerable URL: https://www.opendi.se/search?what=test%22%3E%3Cimg+src%3Dx+onerror%3Dalert%28%27OPENBUGBOUNTY%27%29%3E=test%22%3E%3Cimg+src%3Dx+onerror%3Dalert%28%27OPENBUGBOUNTY%27%29%3E=industry=S%C3%B6k Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:|...

catalog.louisiana.edu XSS vulnerability

Vulnerable URL: http://catalog.louisiana.edu/portfolionopop.php/"--!" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description|...

catalog.sru.edu XSS vulnerability

Vulnerable URL: http://catalog.sru.edu/portfolionopop.php/"--!" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description| Value...

catalog.harrison.edu XSS vulnerability

Vulnerable URL: http://catalog.harrison.edu/portfolionopop.php/"--!" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description|...