Cross site scripting

DISPUTED A stored XSS vulnerability was found in Datenstrom Yellow 0.7.3 via an "Edit page" action. NOTE: the vendor disputes the relevance of this report because an installation accessible to untrusted users is supposed to have parserSafeMode=1 in system/config/config.ini to prevent XSS...

CVE-2018-10726

A stored XSS vulnerability was found in Datenstrom Yellow 0.7.3 via an "Edit page" action. NOTE: the vendor disputes the relevance of this report because an installation accessible to untrusted users is supposed to have parserSafeMode=1 in system/config/config.ini to prevent XSS...

CVE-2018-10726

CVE-2018-10726 is a stored XSS vulnerability in Datenstrom Yellow 0.7.3 exploitable via the "Edit page" action. Multiple connected reports reiterate the vendor’s note that installations accessible to untrusted users should have parserSafeMode=1 in system/config/config.ini to prevent XSS. Affected...

CVE-2018-10726

A stored XSS vulnerability was found in Datenstrom Yellow 0.7.3 via an "Edit page" action. NOTE: the vendor disputes the relevance of this report because an installation accessible to untrusted users is supposed to have parserSafeMode=1 in system/config/config.ini to prevent XSS...

CVE-2018-10726

A stored XSS vulnerability was found in Datenstrom Yellow 0.7.3 via an "Edit page" action. NOTE: the vendor disputes the relevance of this report because an installation accessible to untrusted users is supposed to have parserSafeMode=1 in system/config/config.ini to prevent XSS...

PT-2018-10068 · Datenstrom · Datenstrom Yellow

Name of the Vulnerable Software and Affected Versions: Datenstrom Yellow version 0.7.3 Description: A stored XSS issue was found via an "Edit page" action. The vendor disputes the relevance of this report, noting that installations accessible to untrusted users should have parserSafeMode=1 in...

Discourse: Stored XSS in "post last edited" option

There are two users: Attacker and Victim. 2. Attacker starts a private talk via private message with the Victim. 3. Attacker send a message to Victim, then he edits it or deletes it. 4. Victim sees the yellow pencil, symbol of the edit. 5. Victim clicks on yellow pencil to see the edit and the...

yellowpages.co.tz XSS vulnerability

Open Bug Bounty ID: OBB-571479 Description| Value ---|--- Affected Website:| yellowpages.co.tz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Instances are in 'DOWN' or 'OUT OF SERVICE' state on NetScaler MAS

Instances are in Red or Yellow state on NetScaler MAS...

naturalhealthyellowpages.com XSS vulnerability

Vulnerable URL: http://www.naturalhealthyellowpages.com/cgi-bin/search1.cgi Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8755294 VIP website status:| No Coordinated Disclosure...

armenianyellowpages.us Open Redirect vulnerability

Vulnerable URL: http://armenianyellowpages.us/Redirect.php?u=openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 11903178 VIP website status:| No Coordinated...

Unauthorized Access Vulnerability in Shenzhen Yellow River Digital Histream Product Network Camera

Histream Network Camera provides customers with complete network video surveillance products and total solutions. Shenzhen Yellow River digital Histream products network camera has unauthorized access vulnerability, attackers can use the vulnerability to directly obtain the management user name a...

yellowpages.biz.pk XSS vulnerability

Vulnerable URL: http://www.yellowpages.biz.pk/membership.asp?fill=on=38%20=%20=0%20=%20=1"...

mobile.yellowpages.com.eg Open Redirect vulnerability

Open Bug Bounty ID: OBB-233389 Description| Value ---|--- Affected Website:| mobile.yellowpages.com.eg Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

indianyellowpages.com XSS vulnerability

Vulnerable URL: http://www.indianyellowpages.com/search.php?term=catgty=comp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 163090 VIP website status:| No Check indianyellowpages.c...

yellowpages.com.sg XSS vulnerability

Vulnerable URL: http://www.yellowpages.com.sg/search/all/OPENBUGBOUNTY%22%27%2D%2D%21 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 95678 VIP website status:| No Check yellowpages.com.sg SSL connection:| Grade:...

Yellow Pages Script 3.2 - category_id SQL Injection

Yellow Pages Script 3.2 - categoryid SQL Injection Exploit Title: Yellow Pages Script v3.2 - SQL Injection Google Dork: N/A Date: 11.03.2017 Vendor Homepage: https://www.phpjabbers.com/ Software: https://www.phpjabbers.com/yellow-pages-script/ Demo:...

Yellow Pages Script 3.2 SQL Injection

Exploit Title: Yellow Pages Script v3.2 - SQL Injection Google Dork: N/A Date: 11.03.2017 Vendor Homepage: https://www.phpjabbers.com/ Software: https://www.phpjabbers.com/yellow-pages-script/ Demo: http://demo.phpjabbers.com/index.php?demo=yps&front=1&lid=1 Version: 3.2 Tested on: Win7 x64, Kali...

Yellow Pages Script 3.2 - 'category_id' SQL Injection

Exploit Title: Yellow Pages Script v3.2 - SQL Injection Google Dork: N/A Date: 11.03.2017 Vendor Homepage: https://www.phpjabbers.com/ Software: https://www.phpjabbers.com/yellow-pages-script/ Demo: http://demo.phpjabbers.com/index.php?demo=yps&front=1&lid=1 Version: 3.2 Tested on: Win7 x64, Kali...

Yellow Pages Script 3.2 - category_id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Yellow Pages Script v3.2 - SQL Injection Google Dork: N/A Date: 11.03.2017 Vendor Homepage: https://www.phpjabbers.com/ Software: https://www.phpjabbers.com/yellow-pages-script/ Demo:...