BoutikOne 1.0 - SQL Injection

/ / / / / / / / / / // / / / / ///// // Exploit Title: BoutikOne® v1 list.php SQL Injection Vulnerabilitie Date: 19/09/2010 Author: BrOx-Dz Author: [email protected] Software Link: http://www.boutikone.com/ Dork : Powered by BoutikOne® Version: BoutikOne® Tested on: windows xp pack 3...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in BoutikOne CMS allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter...

CVE-2008-5126

Cross-site scripting XSS vulnerability in search.php in BoutikOne CMS allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter...

CVE-2008-5126

The CVE-2008-5126 entry concerns BoutikOne CMS, where the vulnerability is in the file search.php and is triggered via the search_query parameter. The issue is a Cross-site Scripting (XSS) vulnerability that permits remote attackers to inject arbitrary web script or HTML. The publicly provided de...

CVE-2008-5126: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in BoutikOne CMS allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter...

BoutikOne CMS - search_query Cross-Site Scripting

BoutikOne CMS - searchquery Cross-Site Scripting source: https://www.securityfocus.com/bid/32321/info BoutikOne CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code i...

boutikone-xss.txt

BoutikOne CMS - Cross Site Scripting XSS Vulnerability http://www.boutikone.com/ XSS fOUND BY d3v1l - http://security-sh3ll.com/forum.php Bug :- searchquery=XSS Example :- http://www.un-monde-mystique.com/search.php?lang=1&sort=Ref&searchquery='"alert1337XSS...

BoutikOne CMS - 'search_query' Cross-Site Scripting

source: https://www.securityfocus.com/bid/32321/info BoutikOne CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...