EUVD-2011-3787

Malware in sbrugna...

EUVD-2018-11503

Malware in sbrugna...

EUVD-2013-6606

Malware in sbrugna...

CVE-2024-11460: Improper Neutralization of Special Elements used in an SQL Command

The Verowa Connect plugin for WordPress is vulnerable to SQL Injection via the 'searchstring' parameter in all versions up to, and including, 3.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

Cross site scripting

A vulnerability was found in Creativeitem Atlas Business Directory Listing 2.13 and classified as problematic. Affected by this issue is some unknown functionality of the file /home/search. The manipulation of the argument searchstring leads to cross site scripting. The attack may be launched...

CVE-2023-3756

CVE-2023-3756 affects Creativeitem Atlas Business Directory Listing 2.13. The vulnerability arises from user-controlled input in the /home/search function, where manipulating the argument (notably the search_string) triggers cross-site scripting. Descriptions across multiple feeds consistently id...

CVE-2023-3756: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Creativeitem Atlas Business Directory Listing 2.13 and classified as problematic. Affected by this issue is some unknown functionality of the file /home/search. The manipulation of the argument searchstring leads to cross site scripting. The attack may be launched...

CVE-2014-3119: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in web2Project 3.1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 searchstring parameter in the contacts module to index.php or allow remote attackers to execute arbitrary SQL commands via the updatekey parameter to ...

Cross site scripting

TemaTres 3.0 has reflected XSS via the replacestring or searchstring parameter to the vocab/admin.php?doAdmin=bulkReplace URI...

CVE-2019-14344

TemaTres 3.0 is affected by a reflected XSS in the vocab/admin.php?doAdmin=bulkReplace endpoint via the replace_string or search_string parameters. The vulnerability stems from insufficient input handling, enabling injection of script/code that can impact user sessions through client-side executi...

CVE-2019-14344: Improper Neutralization of Input During Web Page Generation

TemaTres 3.0 has reflected XSS via the replacestring or searchstring parameter to the vocab/admin.php?doAdmin=bulkReplace URI...

Code injection

Artica Integria IMS 5.0.83 has XSS via the searchstring parameter...

CVE-2018-19828

Artica Integria IMS 5.0.83 has XSS via the searchstring parameter...

CVE-2018-19828

Artica Integria IMS 5.0.83 has XSS via the searchstring parameter...

CVE-2018-19828

The CVE-2018-19828 entry affects Integria IMS 5.0.83, where the search_string parameter in index.php is exploitable for Reflected Cross-Site Scripting. The vulnerability is triggered via a GET request and has PoC payloads publicly demonstrated (e.g., payloads like ‘?>[removed]alert(...)’). Pat...

CVE-2018-19828: Improper Neutralization of Input During Web Page Generation

Artica Integria IMS 5.0.83 has XSS via the searchstring parameter...

CVE-2016-9282: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database information via action=search&module=search with the searchstring parameter...

CVE-2012-5701: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in dotProject before 2.1.7 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 searchstring or 2 where parameter in a contacts action, 3 deptid parameter in a departments action, 4 projectid parameter in a project action, or...

CVE-2013-6804: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Search module before 1.1.1 for Jamroom allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to search/results/all/1/4...

CVE-2011-3830: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in Support Incident Tracker aka SiT! 3.65 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter...