431 matches found
yellow-werbemittel.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1136019 Security Researcher NUMAN Helped patch 34 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting yellow-werbemittel.de website and its users. Following...
yellow-werbemittel.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1135112 Security Researcher NUMAN Helped patch 32 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting yellow-werbemittel.de website and its users. Following...
yellow-werbemittel.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1133611 Security Researcher NUMAN Helped patch 32 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting yellow-werbemittel.de website and its users. Following...
yellow-werbemittel.de Cross Site Scripting vulnerability
Security Researcher SecuNinja Helped patch 3412 vulnerabilities Received 12 Coordinated Disclosure badges Received 69 recommendations , a holder of 12 badges for responsible and coordinated disclosure, found a security vulnerability affecting yellow-werbemittel.de website and its users. Following...
web.yellow-cap.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-930027 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
WordPress Yellow Pencil Plugin Privilege Escalation
An Option Update vulnerability exists in WordPress Yellow Pencil Plugin. Successful exploitation of this vulnerability could lead to modification of any options of the affected site...
Yellow Pencil Visual Theme Customizer Plugin for WordPress < 7.2.1 Privilege Escalation
The WordPress Yellow Pencil Visual Theme Customizer Plugin installed on the remote host is affected by a privilege escalation vulnerability due to 'ypremotegetfirst' function. An unauthenticated, remote attacker can leverage this issue to perform WordPress actions that were restricted to...
Wordpress Yellow Pencil Plugin Flaws Actively Exploited
The maker of a WordPress plugin, Yellow Pencil Visual Theme Customizer, is asking all users to immediately update after it was discovered to have software vulnerabilities that are being actively exploited. The attacker exploiting these flaws has been behind several other recent plugin attacks the...
eDirectory - SQL Injection
Exploit Title: Admin auth bypass, SQLi and File Disclosure Google Dork: no defacers please ! Date: March 2019 reported to vendor without response :D Exploit Author: Efren Diaz Author contact: https://twitter.com/elefr3n Vendor Homepage: https://www.edirectory.com/ Software Link: not available...
eDirectory - SQL Injection
eDirectory - SQL Injection Exploit Title: Admin auth bypass, SQLi and File Disclosure Google Dork: no defacers please ! Date: March 2019 reported to vendor without response :D Exploit Author: Efren Diaz Author contact: https://twitter.com/elefr3n Vendor Homepage: https://www.edirectory.com/...
yellowpages.co.th XSS vulnerability
Open Bug Bounty ID: OBB-675791 Description| Value ---|--- Affected Website:| yellowpages.co.th Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...
indianyellowpages.com XSS vulnerability
Open Bug Bounty ID: OBB-638945 Description| Value ---|--- Affected Website:| indianyellowpages.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...
Datenstrom Yellow Cross-Site Request Forgery Vulnerability
Datenstrom Yellow is a system for creating small websites, blogs and wikis. A cross-site request forgery vulnerability exists in the edit/ URI in Datenstrom Yellow version 0.7.3. A remote attacker could exploit this vulnerability to delete articles...
Datenstrom Yellow Cross-Site Scripting Vulnerability
Datenstrom Yellow is a system for creating small websites, blogs and wikis. A cross-site scripting vulnerability exists in Datenstrom Yellow version 0.7.3. A remote attacker can exploit this vulnerability to inject malicious code via an edit page...
CVE-2018-10758
The edit/ URI in Datenstrom Yellow 0.7.3 has CSRF via a delete action that can delete articles...
CVE-2018-10758
The edit/ URI in Datenstrom Yellow 0.7.3 has CSRF via a delete action that can delete articles...
Cross site request forgery (csrf)
The edit/ URI in Datenstrom Yellow 0.7.3 has CSRF via a delete action that can delete articles...
CVE-2018-10758
The edit/ URI in Datenstrom Yellow 0.7.3 has CSRF via a delete action that can delete articles...
CVE-2018-10758
The CVE-2018-10758 entry concerns Datenstrom Yellow 0.7.3, where the edit/ URI is vulnerable to CSRF via a delete action that can delete articles. The core issue is a CSRF flaw in the edit endpoint that allows unauthorized deletion of content, implying that an attacker could induce a logged-in us...
CVE-2018-10726
A stored XSS vulnerability was found in Datenstrom Yellow 0.7.3 via an "Edit page" action. NOTE: the vendor disputes the relevance of this report because an installation accessible to untrusted users is supposed to have parserSafeMode=1 in system/config/config.ini to prevent XSS...