CVE-2025-48941

MyBB is free and open source forum software. Prior to version 1.8.39, the search component does not validate permissions correctly, which allows attackers to determine the existence of hidden draft, unapproved, or soft-deleted threads containing specified text in the title. The visibility state...

CVE-2025-48941 MyBB may disclosure unviewable threads' titles in searches

MyBB is free and open source forum software. Prior to version 1.8.39, the search component does not validate permissions correctly, which allows attackers to determine the existence of hidden draft, unapproved, or soft-deleted threads containing specified text in the title. The visibility state...

PT-2025-23536 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.8.39 Description: The search component in MyBB does not validate permissions correctly, allowing attackers to determine the existence of hidden threads, including draft, unapproved, or soft-deleted threads, by analyzi...

MyBB 安全漏洞

MyBB MyBulletinBoard is a free and web-based forum software developed by MyBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. A security vulnerability exists in MyBB versions prior to 1.8.39, which stems from the search componen...

CVE-2021-2039

Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM component: Search. Supported versions that are affected are 20.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Core - Server Framework...

CVE-2021-30074

docsify 4.12.1 is affected by Cross Site Scripting XSS because the search component does not appropriately encode Code Blocks and mishandles the " character...

PT-2025-22322 · Hkcms · Hkcms

Name of the Vulnerable Software and Affected Versions: HkCms versions up to 2.3.2.240702 Description: A problematic issue was found in HkCms, affecting an unknown part of the file /index.php/search/index.html of the component Search. The manipulation of the keyword argument leads to cross-site...

Malicious code in @sporta-technology/d11-web-components.search (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-3152

CVE-2025-3152 affects Caipeichao ThinkOX 1.0, specifically the Search component at /ThinkOX-master/index.php?s=/Weibo/Index/search.html. The vulnerability arises from manipulation of the keywords argument, enabling cross-site scripting. It can be triggered remotely and the exploit has been disclo...

CVE-2025-2132

A vulnerability classified as critical has been found in ftcms 2.1. Affected is an unknown function of the file /admin/index.php/web/ajaxalllists of the component Search. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

CVE-2025-2132 ftcms Search ajax_all_lists sql injection

A vulnerability classified as critical has been found in ftcms 2.1. Affected is an unknown function of the file /admin/index.php/web/ajaxalllists of the component Search. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

Microsoft Windows 代码注入漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows Search Component. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are...

CVE-2024-10301 PHPGurukul Medical Card Generation System Search search-medicalcard.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Medical Card Generation System 1.0. Affected is an unknown function of the file /admin/search-medicalcard.php of the component Search. The manipulation of the argument searchdata leads to sql injection. It is possible to...

Microsoft Windows Search Component 后置链接漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A backlink vulnerability exists in Microsoft Windows Search Component. The following products and editions are affected:Windows 10 Version 22H2 for 32-bit Systems,Windows Server 2022 Server...

The vulnerability of the /index.php?page=search component of the web application used to manage assets in RackTables allows a attacker to disclose sensitive information.

The vulnerability of the /index.php?page=search component of the web application used to manage RackTable assets exists due to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to disclose sensitive informatio...

Cross site scripting

Reflected cross-site scripting XSS vulnerability in Racktables v0.22.0 and before, allows local attackers to execute arbitrary code and obtain sensitive information via the search component in index.php...

Racktables Security Breach

Racktables is a data center asset management system. It is used for data center and server room asset management. A security vulnerability exists in Racktables v0.22.0 and earlier versions, which originated from a vulnerability that allows local attackers to execute arbitrary code and obtain...

CVE-2024-2351

A vulnerability classified as critical was found in CodeAstro Ecommerce Site 1.0. Affected by this vulnerability is an unknown functionality of the file action.php of the component Search. The manipulation of the argument catid/brandid/keyword leads to sql injection. The attack can be launched...

CVE-2023-7156

A vulnerability has been found in Campcodes Online College Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file index.php of the component Search. The manipulation of the argument category leads to sql injection. The attack can be initiated remotely...

Sql injection

A vulnerability has been found in Campcodes Online College Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file index.php of the component Search. The manipulation of the argument category leads to sql injection. The attack can be initiated remotely...