15 matches found
CVE-2018-9122
In Crea8social 2018.2, there is Reflected Cross-Site Scripting via the term parameter to the /search URI...
EUVD-2018-20722
Malware in sbrugna...
CVE-2009-2771
Cross-site scripting XSS vulnerability in Free Arcade Script 1.3 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to the default URI under search/...
CVE-2018-20779
Traq 3.7.1 allows SQL Injection via a tickets?search= URI...
CVE-2018-9122
In Crea8social 2018.2, there is Reflected Cross-Site Scripting via the term parameter to the /search URI...
CVE-2018-9122
In Crea8social 2018.2, there is Reflected Cross-Site Scripting via the term parameter to the /search URI...
Cross site scripting
In Crea8social 2018.2, there is Reflected Cross-Site Scripting via the term parameter to the /search URI...
CVE-2018-9122
In Crea8social 2018.2, there is Reflected Cross-Site Scripting via the term parameter to the /search URI...
CVE-2017-10801
phpSocial formerly phpDolphin before 3.0.1 has XSS in the PATHINFO to the search/tag/ URI...
Sql injection
SQL injection vulnerability in DWdirectory 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the search parameter to the /search URI...
CVE-2007-6392: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in DWdirectory 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the search parameter to the /search URI...
Cross site scripting
Cross-site scripting XSS vulnerability in Google Mini Search Appliance 3.4.14 allows remote attackers to inject arbitrary web script or HTML via the ie parameter to the /search URI...
CVE-2007-5255
Cross-site scripting XSS vulnerability in Google Mini Search Appliance 3.4.14 allows remote attackers to inject arbitrary web script or HTML via the ie parameter to the /search URI...
CVE-2007-5255
Cross-site scripting XSS vulnerability in Google Mini Search Appliance 3.4.14 allows remote attackers to inject arbitrary web script or HTML via the ie parameter to the /search URI...
CVE-2007-5255: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Google Mini Search Appliance 3.4.14 allows remote attackers to inject arbitrary web script or HTML via the ie parameter to the /search URI...