1014 matches found
RunCMS <= 1.6 disclaimer.php Remote File Overwrite Exploit
Exploit for unknown platform in category web applications ========================================================== RunCMS RunCmss Bug Yahoo! Crawler body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px;...
myway-xss.txt
Title : My Way XSS Description : The My Way Search engine myway.com is vulnerable to XSS Author : Tosser E-mail : [email protected] Proof : http://search.myway.com/search/AJmain.jhtml?t=&st=site&ptnrS=mw&searchfor=%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E...
CVE-2003-1498
Cross-site scripting XSS vulnerability in search.php for WRENSOFT Zoom Search Engine 2.0 Build 1018 and earlier allows remote attackers to inject arbitrary web script or HTML via the zoomquery parameter...
CVE-2003-1498
CVE-2003-1498 is an XSS vulnerability in WRENSOFT Zoom Search Engine, affecting version 2.0 Build 1018 and earlier. The vulnerability arises from improper handling of the zoom_query parameter in search.php, allowing remote attackers to inject arbitrary web script or HTML. The available documents ...
CVE-2003-1498: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.php for WRENSOFT Zoom Search Engine 2.0 Build 1018 and earlier allows remote attackers to inject arbitrary web script or HTML via the zoomquery parameter...
telemark-xss.txt
Title : Telemark XSS Description : The Telemark telemark.com search engine is vulnerable to XSS Author : Tosser E-mail : [email protected] Proof :...
Cross site scripting
Cross-site scripting XSS vulnerability in search.html in Search Engine Builder allows remote attackers to inject arbitrary web script or HTML via the searWords parameter...
CVE-2007-4479
CVE-2007-4479 describes a Cross-site scripting (XSS) vulnerability in the Search Engine Builder’s search.html, exploitable via the searWords parameter to inject arbitrary script/HTML. The issue affects the described product/component/feature as per the CVE entry; the documented impact is remote s...
CVE-2007-4479
Cross-site scripting XSS vulnerability in search.html in Search Engine Builder allows remote attackers to inject arbitrary web script or HTML via the searWords parameter...
CVE-2007-4479: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search.html in Search Engine Builder allows remote attackers to inject arbitrary web script or HTML via the searWords parameter...
Vulnerability in Search Engine Builder
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в Search Engine Builder. XSS: Уязвимость на странице search.html в параметре searWords. http://site/search/search.html?searWords=3Cscript3Ealertdocument.cookie3C/script3E Дополнительная информация о данной уязвимост...
ALeadSoft Search Engine Builder - Search.HTML Cross-Site Scripting
source: https://www.securityfocus.com/bid/25391/info ALeadSoft Search Engine Builder is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
ALeadSoft Search Engine Builder - Search.HTML Cross-Site Scripting
ALeadSoft Search Engine Builder - Search.HTML Cross-Site Scripting source: https://www.securityfocus.com/bid/25391/info ALeadSoft Search Engine Builder is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage...
googlecustom-xss.txt
Google custom search engine contributors invite XSS Vendor url: http://www.google.com Product Url: http://www.google.com/coop/cse/ Advisore url:http://lostmon.blogspot.com/2007/08/ google-custom-search-engine.html Vendor notify :yes vendor confirmed: yes Fixed: YES Description: A Custom Search...
Baidu Soba Remote Code Execute Vulnerability(FGA-2007-10)
hi full-disclosure, Baidu Soba Remote Code Execute Vulnerability by cocoruder of Fortinet Security Research Team http://ruder.cdut.net Summary: Baidu Soba is a popular browser toolbar which developed by Baidu, a Chinese web search engine company, like Google, more informations can be found at:...
People Directory search can be misused to retrieve email addresses of all users
Even when email addresses should be hidden because of global settings, it is possible to retrieve email addresses of all the users in the system by misusing search in people directory. It seems that the email address is one of the attributes that are being indexed by the search engine. So if one...
MOSEB-07 Bonus: Vulnerabilities in Yandex.Server
New bonus vulnerabilities in Yandex. In this case vulnerabilities not directly at Yandex’s site, like at MOSEB-07: Vulnerability at blogs.yandex.ru, but in local search engine made by Yandex. The holes are in Yandex.Server Яndex.Server, local search engine from Yandex, which used by a lot of site...
Vulnerability in AltaVista local search engine
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в поисковике AltaVista local search engine. Уязвимость в параметре text в главном скрипте. XSS: http://site/?text=3Cscript3Ealertdocument.cookie3C/script3E О данной уязвимости я писал в рамках моего проекта Month of...
Vulnerabilities in Yandex.Server
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting уязвимостях в локальном поисковике Яndex.Server. Уязвимости в параметрах query и within в главном скрипте. XSS: http://site/search/?query=223E3Cscript3Ealertdocument.cookie3C/script3E...
MOSEB-15 Bonus: Vulnerability in Google Custom Search Engine
MOSEB-15 Bonus: Vulnerability in Google Custom Search Engine 22:57 15.06.2007 New bonus vulnerability in Google. In this case vulnerability not directly at Google’s site, like at MOSEB-15: Vulnerabilities at images.google.com, but in his search engine called Google Custom Search Engine also known...