Shodan
Last Seen: 2025-04-27

GeneralInformation

cpl91.hosting24.com
server91.hosting24.com
hosting24.com 

WebTechnologies

CDN
BootstrapCDN3.3.7
Google Hosted Libraries
Hosting
Hostinger
JavaScript libraries
jQuery3.2.1
Miscellaneous
HTTP/3
Security
HSTS
UI frameworks
Bootstrap3.3.7

OpenPorts

21 / tcp
551982514 | 2025-04-27T23:00:35.921405
80 / tcp
1171794585 | 2025-04-26T06:25:16.255765
110 / tcp
1952082069 | 2025-04-25T13:07:31.778369
143 / tcp
1559185454 | 2025-04-27T04:15:36.469724
443 / tcp
1161163323 | 2025-04-26T08:04:01.572432
465 / tcp
1062793203 | 2025-04-21T14:06:16.050067
587 / tcp
724920014 | 2025-04-27T11:43:54.008079
993 / tcp
-1132241830 | 2025-04-26T14:04:43.915944
995 / tcp
-1001764030 | 2025-04-24T17:30:13.017390
2082 / tcp
-1766537194 | 2025-04-25T18:01:59.304558
2083 / tcp
-126181393 | 2025-04-26T22:06:59.716257
2086 / tcp
-787571667 | 2025-04-24T07:28:45.714832
2087 / tcp
-219581826 | 2025-04-26T09:43:48.762641
2096 / tcp
-1725187312 | 2025-04-04T16:16:33.594297
3306 / tcp
1948936295 | 2025-04-26T18:51:26.916726

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2024(1)
CVE-2024-6484
6.4A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting (XSS) attacks. The issue is present in the carousel component, where the data-slide and data-slide-to attributes can be exploited through the href attribute of an <a> tag due to inadequate sanitization. This vulnerability could potentially enable attackers to execute arbitrary JavaScript within the victim's browser.
2020(2)
CVE-2020-11023
6.9In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022
6.9In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
2019(2)
CVE-2019-11358
6.1jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2019-8331
6.1In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
2018(4)
CVE-2018-20677
6.1In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.
CVE-2018-20676
6.1In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.
CVE-2018-14042
6.1In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
CVE-2018-14040
6.1In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.
2016(1)
CVE-2016-10735
6.1In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.



Products
Pricing
Contact Us

Shodan ® - All rights reserved