88 matches found
CVE-2013-4384
Cross-site scripting XSS vulnerability in Google Site Search module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.10 for Drupal allows remote attackers to inject arbitrary web script or HTML by causing crafted data to be returned by the Google API...
Cross site scripting
Cross-site scripting XSS vulnerability in Google Site Search module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.10 for Drupal allows remote attackers to inject arbitrary web script or HTML by causing crafted data to be returned by the Google API...
CVE-2013-4384
Cross-site scripting XSS vulnerability in Google Site Search module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.10 for Drupal allows remote attackers to inject arbitrary web script or HTML by causing crafted data to be returned by the Google API...
CVE-2005-3869
Cross-site scripting XSS vulnerability in index.php in Google API Search 1.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via hex-encoded values in the REQ parameter...
CVE-2005-3869
The CVE-2005-3869 entry describes a Cross-site scripting (XSS) flaw in index.php of Google API Search 1.3.1 and earlier, exploitable via hex-encoded values in the REQ parameter to inject arbitrary script/HTML. Affected software: Google API Search 1.3.1 and earlier. Impact per the source: user-fac...
CVE-2005-3869
Cross-site scripting XSS vulnerability in index.php in Google API Search 1.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via hex-encoded values in the REQ parameter...
SearchSolutions 1.2/1.3 (Multiple Products) - Cross-Site Scripting
source: https://www.securityfocus.com/bid/15612/info SearchSolutions SearchFeed, RevenuePilot, and Google API are prone to cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to...
