catalog.ucdenver.edu XSS vulnerability

Vulnerable URL: http://catalog.ucdenver.edu/portfolionopop.php/"--!" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline: Description|...

WebSummit: found a vulnerability in your website

the vulnerability in your website is something called clickjacking or x-frame options header not set . when X-frame options header is not included in the HTTP the attacker can attack your website by clickjacking. so what is x-frame options? The X-Frame-Options HTTP response header can be used to...

U.S. Dept Of Defense: SQL injection vulnerability on a DoD website

A Department of Defense website was vulnerable to a SQL injection attack which may allow an attacker to execute arbitrary SQL commands and expose sensitive data. @0xd0m7 was able to demonstrate this vulnerability by crafting a specially formatted URL...

apps.pixlr.com XSS vulnerability

Vulnerable URL: http://apps.pixlr.com/proxy/?url=data://temp/588eb2ccf9ff19a6ed00363d.html Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure...

newbienudes.com XSS vulnerability

Vulnerable URL: http://www.newbienudes.com/photos/viewPhoto.asp?ID=14220810=C==D=P&p0;=14220813%27"--!confirmOPENBUGBOUNTY%3C/Script...

keyword-suggest-tool.com XSS vulnerability

Vulnerable URL: http://www.keyword-suggest-tool.com/comparekeywordspopularity/ Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 10:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 142136 VIP website status:| ...

caritas-halle.de XSS vulnerability

Vulnerable URL: https://www.caritas-halle.de/suche.aspx?searchterm=%3cscript%3ealert%27OPENBUGBOUNTY%27%3c%2fscript%3e Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

SQL Injection Vulnerability in Zaoyang City Shanshui Digital Website Building System

Zaoyang Shanshui digital website builder system is a website builder system. A SQL injection vulnerability exists in the Zaoyang City Landscape Digital Website Builder System. Due to the program's lack of filtering of bb parameters, an attacker can exploit the vulnerability to obtain sensitive...

n2npropertypoint.com XSS vulnerability

Vulnerable URL: http://n2npropertypoint.com/login.php?err=%22%3E%3Csvg/onload=confirm/openbugbounty/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

CVE-2016-7790

Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload 'php' file to the website through uploaderpaste.php, then overwrite /framework/conf/config.php, which leads to arbitrary code execution...

U.S. Dept Of Defense: Misconfigured user account settings on DoD website

A Department of Defense website was misconfigured in a manner that may have allowed a malicious user to reset, or steal login credentials of legitimate users. @mantis was able to demonstrate this vulnerability by testing the user account application of the website. Thanks @mantis!...

guelph.ctvnews.ca XSS vulnerability

Vulnerable URL: http://guelph.ctvnews.ca/video/'"--! Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check guelph.ctvnews.ca SSL connection:| Grade: B Coordinated...

rhyddiaithganoloesol.cardiff.ac.uk XSS vulnerability

Vulnerable URL: http://www.rhyddiaithganoloesol.cardiff.ac.uk/cy/wordlist.php?prefix=%22%3E%3Cimg/src=%22%3E%22onerror=confirm%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

MS14-009: Description of the security update for the .NET Framework 4.5.1 for Windows 8, Windows RT 8.1, and Windows Server 2012 R2: February 11, 2014

MS14-009: Description of the security update for the .NET Framework 4.5.1 for Windows 8, Windows RT 8.1, and Windows Server 2012 R2: February 11, 2014 View products that this article applies to. Introduction This update resolves vulnerabilities that could allow elevation of privilege if a user...

anagrafe.miur.it XSS vulnerability

Open Bug Bounty ID: OBB-203719 Description| Value ---|--- Affected Website:| anagrafe.miur.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

imzog.com XSS vulnerability

Open Bug Bounty ID: OBB-202095 Description| Value ---|--- Affected Website:| imzog.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pornoente.com XSS vulnerability

Vulnerable URL: http://www.pornoente.com/suche/?k=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%27OPENBUGBOUNTY%27%29%3E Details: Description| Value ---|--- Patched:| Yes, at 19.07.2017 Latest check for patch:| 19.07.2017 10:00 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

pcsorders.sprint.com XSS vulnerability

Vulnerable URL: https://pcsorders.sprint.com/federal/select.php?phone=%22%3E%3CscRipt%3Ealert/OPENBUGBOUNTY/%3C/scRipt%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 13:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

miscota.be XSS vulnerability

Vulnerable URL: http://www.miscota.be/search/s?q=%22%3E%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FXSSPOSED%2F%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2005348 VIP...

stockcharts.com XSS vulnerability

Open Bug Bounty ID: OBB-201297 Description| Value ---|--- Affected Website:| stockcharts.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...