PT-2021-10416

Name of the Vulnerable Software and Affected Versions: phpwcms version 1.9 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is located in the "/image zoom.php" API endpoint. Recommendations: For phpwcms version 1.9, as a temporary workaround,...

tabloidpulsa.co.id XSS vulnerability

Vulnerable URL: https://www.tabloidpulsa.co.id/zoom.php?image=xss%22%3E%3Csvg/onload=prompt/openbugbounty/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 57618 VIP website...

birdseyeviews.org XSS vulnerability

Vulnerable URL: http://www.birdseyeviews.org/zoom.php?city=Austin=1887info=1"...

tcalderon.com XSS vulnerability

Vulnerable URL: http://www.tcalderon.com/program/zoom.php?dir=planolocalidades.jpg%27%22%3E%3CScRiPt%20%3Eprompt%28/OPENBUGBOUNTY/%29%3C/ScRiPt%3E=6 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

CVE-2006-3022: Undefined Security Weakness

Cross-site scripting XSS vulnerability in zoom.php in fipsGallery 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter...