Educe ASP Search Engine 1.5.6 - 'search.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30849/info ASP Search Engine is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

klinks-sqlxss.txt

================================================================================ || K-Links Directory SQL-INJECTION, XSS ================================================================================ Application: K-Links Directory ------------ Website: http://turn-k.net/k-links -------- Version...

k-links directory - SQL Injection Cross-Site Scripting

k-links directory - SQL Injection Cross-Site Scripting ================================================================================ || K-Links Directory SQL-INJECTION, XSS ================================================================================ Application: K-Links Directory...

K-Links Directory (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== K-Links Directory SQL/XSS Multiple Remote Vulnerabilities ===========================================================...

sphider134-xss.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sphider Cross Site Scripting Vulnerability Original release date: 2008-04-29 Last revised: 2008-05-06 Latest version: http://users.own-hero.net/decoder/advisories/sphider134-xss.txt Source: Christian Holler Systems Affected: Sphider 1.3.4...

Vulnerability in mnoGoSearch

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в mnoGoSearch локальной поисковой системе. Уязвимость в скрипте search.php3 в параметре q. XSS: http://site/search/search.php3?q=3C/title3E3Cscript3Ealertdocument.cookie3C/script3E Уязвима версия mnoGoSearch 3.3.6 и...

[SECURITY] Fedora 7 Update: namazu-2.0.18-1.fc7

Namazu is a full-text search engine software intended for easy use. Not only it works as CGI program for small or medium scale WWW search engine, but also works as personal use such as search system for local HDD...

JVN#00892830 Namazu cross-site scripting vulnerability

Namazu, Japanese full-text search engine does not specify charset in the ContentType header that could allow a remote attacker to execute an arbitrary script on the user's web browser. Impact An arbitrary script could be executed on the user's web browser. Solution Update the Software Update to t...

Astanda Directory Project 1.2 (link_id) SQL Injection Vulnerability

No description provided by source. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-= Author: youkn0w Contact: you-knowatlinuxmaildotorg Website: www.youknowz.info Script: Astanda Directory Project Bug: APD Remote SQL Injection =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-= Script Information...

astanda-sql.txt

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-= Author: youkn0w Contact: you-knowatlinuxmaildotorg Website: www.youknowz.info Script: Astanda Directory Project Bug: APD Remote SQL Injection =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-= Script Information...

Astanda Directory Project 1.2 - link_id SQL Injection

Astanda Directory Project 1.2 - linkid SQL Injection =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-= Author: youkn0w Contact: you-knowatlinuxmaildotorg Website: www.youknowz.info Script: Astanda Directory Project Bug: APD Remote SQL Injection =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-= Script...

Astanda Directory Project 1.2 (link_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Astanda Directory Project 1.2 linkid SQL Injection Vulnerability ===================================================================...

CVE-2008-0257

Cross-site scripting XSS vulnerability in search.pl in Dansie Search Engine 2.7 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in search.pl in Dansie Search Engine 2.7 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-0257

Cross-site scripting XSS vulnerability in search.pl in Dansie Search Engine 2.7 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-0257

The CVE-2008-0257 entry describes a Cross-site scripting (XSS) vulnerability in Dansie Search Engine 2.7, specifically in search.pl, exploitable via the keywords parameter. This allows remote attackers to inject arbitrary web script or HTML. The public records provided do not specify affected ver...

CVE-2008-0257: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.pl in Dansie Search Engine 2.7 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

WordPress $_SERVER变量跨站脚本漏洞

BUGTRAQ ID: 26885 WordPress是一款免费的论坛Blog系统。 WordPress处理全局变量时存在漏洞，远程攻击者可能利用此漏洞控制导致跨站脚本执行攻击。 WordPress信任了$SERVER'REQUESTURI'全局变量，因此远程攻击者控制了$SERVER'REQUESTURI'就可以执行跨站脚本攻击。以下是/wp-includes/query.php文件中第34行的有漏洞函数： function isadmin global $wpquery; return $wpquery-isadmin || stripos$SERVER'REQUESTURI',...

Unfixed XSS vulnerability at www.irchelp.org

Security researcher Uber0n, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.irchelp.org, which at the time of submission ranked 107781 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is currentl...

RunCMS <= 1.6 disclaimer.php Remote File Overwrite Exploit

Exploit for unknown platform in category web applications ========================================================== RunCMS RunCmss Bug Yahoo! Crawler body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px;...