nba.com XSS vulnerability

Open Bug Bounty ID: OBB-71668 Description| Value ---|--- Affected Website:| nba.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lavadesigncompany.com XSS vulnerability

Vulnerable URL: http://lavadesigncompany.com/search.html?search=%3CSCRIPT%3Ealert%28%27XSSPOSED%27%29%3B%3C%2FSCRIPT%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

secure.przelewy24.pl XSS vulnerability

Vulnerable URL:...

interpowermalta.com XSS vulnerability

Vulnerable URL: http://www.interpowermalta.com/prodinfo.php?id=%22%22;%3C/script%3E%3Cscript%3Eprompt%28/XSSPOSED/%29%3C/script%3E%3C%22 Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 09:08 GMT Vulnerability type:| XSS Vulnerability status:|...

conference.usu.edu Open Redirect vulnerability

Open Bug Bounty ID: OBB-66533 Description| Value ---|--- Affected Website:| conference.usu.edu Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

corporatelearning.binus.edu XSS vulnerability

Open Bug Bounty ID: OBB-66135 Description| Value ---|--- Affected Website:| corporatelearning.binus.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

mamep.molgen.mpg.de XSS vulnerability

Open Bug Bounty ID: OBB-64721 Description| Value ---|--- Affected Website:| mamep.molgen.mpg.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

Mobile Vikings: XSS Vulnerability on all pages

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Load this URL: https://vikingco.com/en/home/ttttttalert0 Notice the alert0 box. This is caused by allowing for the user to inject alert0 which will simply close the current script tag and then create a new one with alert0 in it alert0. If you need any...

leverett.harvard.edu XSS vulnerability

Open Bug Bounty ID: OBB-58370 Description| Value ---|--- Affected Website:| leverett.harvard.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

Coinbase: iframes considered harmful

The Coinbase API offers an iframe payment option. iframes are attractive because they allow Coinbase's customers to give the illusion that the Bitcoin transaction is embedded entirely within the customer's website. But customers can and do refer to that iframe on insecure connections. Hijacking a...

WTK Network Shopping CMS 1.6.5 SQL Injection

Exploit Title: WTK Network Sql injection Vulnerability Google Dork: allinurl: "product.php?catid=" Date: april, 11, 2015 Exploit Author: ali ahmady From Iran Vendor Homepage: http://wtksoftware.com/ Software Link: http://wtksoftware.com/clients/cart.php Version: 1.6.5 Tested on: Linux demo :...

某政府系统#注入漏洞一枚

简要描述： RT 详细说明： 山东农友软件公司官网:http://www.nongyou.com.cn/ 案例如下: /symItemManage/ItemForth.aspx?id=11 http://222.135.76.147:8200/symItemManage/ItemForth.aspx?id=11 http://222.135.127.190:7200/symItemManage/ItemForth.aspx?id=11 http://221.2.149.47:8200/symItemManage/ItemForth.aspx?id=11...

WordPress Daily Edition Theme 1.6.2 Cross Site Scripting

WordPress Daily Edition Theme v1.6.2 XSS Cross-site Scripting Security Vulnerabilities Exploit Title: WordPress Daily Edition Theme /fiche-disque.php id Parameters XSS Security Vulnerabilities Product: WordPress Daily Edition Theme Vendor: WooThemes Vulnerable Versions: v1.6. v1.5. v1.4. v1.3...

naa.gov.au XSS vulnerability

Open Bug Bounty ID: OBB-55597 Description| Value ---|--- Affected Website:| naa.gov.au Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

larryperrinrealtor.com XSS vulnerability

Open Bug Bounty ID: OBB-55004 Description| Value ---|--- Affected Website:| larryperrinrealtor.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

xdcms网上订餐系统 sql注入 #2

简要描述： rt 详细说明： 1 对于修改资料时，post的数组的key做了些过滤。 可是我们还是能 非法修改一些重要字段的。例如 http://demo.xdcms.cn/index.php?m=member&f=editsave post fields%5Bthumb%5D=1&fields%5Bmoney%5D=99999&fields%5Bsex%5D=%E7%94%B7&fields%5Bemail%5D=333333%40333.com&fields%5Baddress%5D=1&gourl= 无限充值了。 2 同样是post的数组的key的过滤问题。 少过滤了一处。 注册处...

Nearby Live: Gain access to any user's email address

An attacker can gain access to any user's email address by accessing the /points/buy page. This is a serious issue because the email address is used as one of the login credentials for the website. Steps to reproduce : 1. Go to https://www.wnmlive.com/account/points 2. Select "Get more points" +...

Hacking PayPal Account with Just a Click

The eBay owned popular digital payment and money transfer service, PayPal has been found to be vulnerable to a critical web application vulnerability that could allow an attacker to take control over users' PayPal account with just a click, affecting more than 156 millions PayPal users. An Egypti...

Mouse Media Script 1.6 0 - Stored XSS Vulnerability

No description provided by source. Exploit Title: Mouse Media Script Stored XSS Vulnerability Google Dork: "is your best source of fun." inurl:/view/popular Date: 04-10-2014 Exploit Author: Halil Dalabasmaz Version: v1.6 Software Link: http://codecanyon.net/item/mouse-media-script/7773254 Softwar...

libaware.economads.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-50125 Description| Value ---|--- Affected Website:| libaware.economads.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...