156 matches found
CVE-2007-6375
CVE-2007-6375 affects Bitweaver 2.0.0 and earlier. The vulnerability comprises multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via (1) the sort_mode parameter to wiki/list_pages.php and (2) the highlight parameter to search/index.php. A report also menti...
Bitweaver XSS & SQL Injection Vulnerability
HSC Bitweaver XSS & SQL Injection Vulnerability Bitweaver is an open source content management system. Its speed and power are ideal for large-scale community websites and corporate applications, but it is simple enough for non-technical small site users to set up and administrate. It comes fully...
CVE-2007-3447
SQL injection vulnerability in BugMall Shopping Cart 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the "basic search box." NOTE: 4.0.2 and other versions might also be affected...
Sql injection
SQL injection vulnerability in BugMall Shopping Cart 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the "basic search box." NOTE: 4.0.2 and other versions might also be affected...
CVE-2006-7023
Multiple cross-site scripting XSS vulnerabilities in fx-APP 0.0.8.1 allow remote attackers to inject arbitrary HTML or web script via 1 the search box, and the 2 url, 3 website, 4 comment, and 5 signature fields in the profile, and possibly 6 a menu item...
Cross site scripting
Cross-site scripting XSS vulnerability in search in High 5 Review Site allows remote attackers to inject arbitrary web script or HTML via the q parameter aka the search box...
Yet Another Link Directory v1.0
Yet Another Link Directory v1.0 http://yald.sourceforge.net/ Effected files: yald.php --------------------------- yald.php search box XSS User input isn't sanatized before being generated. In the search box for a PoC put: script src=http://www.youfucktard.com/xss.js/script url:...
CVE-2006-6582
Multiple cross-site scripting XSS vulnerabilities in ScriptMate User Manager 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 membersusername user and 2 memberspassword password fields in a login action in members/default.asp, and 3 the Search box. NOTE: som...
CVE-2006-6583
ScriptMate User Manager 2.1 and earlier allow remote attackers to obtain sensitive information via unspecified vectors related to 1 the Logins box and 2 the Search box...
CVE-2006-6583
ScriptMate User Manager 2.1 and earlier allow remote attackers to obtain sensitive information via unspecified vectors related to 1 the Logins box and 2 the Search box...
youtube.txt
Youtube.com Homepage: http://www.youtube.com Affected files: Search box input Adding a new blog: - Blog name XSS Vuln with cookie disclosure via search box: Data isn't sanatized when using the search box. For PoC input: PoC link:...
dealgates.txt
Dealgates.com Homepage: http://www.dealgates.com Affected files: Input boxes when registering new account Search box ------------------------------------- XSS vuln with cookie disclosure when registering a new account. To bypass the adding backslashes to ; and ", we use the long UTF-8 unicode of ...
CVE-2006-3071
Cross-site scripting XSS vulnerability in index.php in MP3 Search/Archive 1.2 allows remote attackers to inject arbitrary web script or HTML via the 1 keywords parameter, as used by the "search box", and 2 res parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in search.html in Bulletin Board Elite-Board E-Board 1.1 allows remote attackers to inject arbitrary web script or HTML via the search box...
