Sphider configset.php settings_dir Parameter Remote File Inclusion

The remote host is running Sphider, an open source web spider and search engine written in PHP. The version of Sphider installed on the remote host fails to sanitize user-supplied input to the 'settingsdir' parameter of the 'admin/configset.php' script before using it in a PHP 'include' function...

Free Articles Directory Remote Command Exucetion

Web Site : http://www.99articles.com Script Demo Site : http://www.articlesone.com General : 1. Support rssfeed XML to distribute articles for others website and blogs. It will make grow website popularity 2. Newsletter to be growing visitors 3. Membership system for writer participants submit...

CVE-2005-4363

Cross-site scripting XSS vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters...

CVE-2005-4363: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters...

CVE-2005-4284

CVE-2005-4284 describes a cross-site scripting (XSS) vulnerability in the StaticStore Search Engine up to version 1.189A. The flaw allows remote attackers to inject arbitrary script or HTML via parameters to search.cgi, possibly the keywords parameter, leading to user script execution in the cont...

CVE-2005-4284

Cross-site scripting XSS vulnerability in StaticStore Search Engine 1.189A and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to search.cgi, possibly the keywords parameter. NOTE: this issue was originally disputed by the vendor, but it has since...

StaticStore Search Engine Friendly E-Commerce XSS

StaticStore Search Engine Friendly E-Commerce XSS Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/staticstore-search-engine-friendly-e.html vendor:www.staticstore.com affected version:1.189A and prior Product Description: StaticStore is a full sto...

CVE-2005-4284: Undefined Security Weakness

Cross-site scripting XSS vulnerability in StaticStore Search Engine 1.189A and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to search.cgi, possibly the keywords parameter. NOTE: this issue was originally disputed by the vendor, but it has since...

CVE-2005-3966

Cross-site scripting XSS vulnerability in search.jsp in Java Search Engine JSE 0.9.34 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2005-3966

Cross-site scripting XSS vulnerability in search.jsp in Java Search Engine JSE 0.9.34 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2005-3966

CVE-2005-3966 concerns Cross-site Scripting (XSS) in Java Search Engine (JSE) 0.9.34. The vulnerability is triggered via the q parameter in search.jsp, allowing remote attackers to inject arbitrary web script or HTML. The NVD/CVE details show a MEDIUM severity (CVSS v2 base score 4.3) with networ...

CVE-2005-3966: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.jsp in Java Search Engine JSE 0.9.34 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

Interspire FastFind 2005 XSS vuln.

Interspire FastFind 2005 XSS vuln. Vuln. dicovered by : r0t Date: 1 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/interspire-fastfind-2005-xss-vuln.html Vendor:http://www.interspire.com/fastfind/ affected version: 2005 and 2004 version. Product Description: Add powerful, flexible...

JSE XSS vuln.

JSE XSS vuln. Vuln. dicovered by : r0t Date: 2 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/jse-xss-vuln.html Vendor:http://www.me.lv/jse/index.html affected version:0.9.34 Product Description: Java Search Engine is a server-side search engine program for web sites. Search engin...

Java Search Engine 0.9.34 - search.jsp Cross-Site Scripting

Java Search Engine 0.9.34 - search.jsp Cross-Site Scripting source: https://www.securityfocus.com/bid/15687/info Java Search Engine is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverag...

Java Search Engine 0.9.34 - search.jsp Cross-Site Scripting

source: https://www.securityfocus.com/bid/15687/info Java Search Engine is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

CVE-2005-3866

Cross-site scripting XSS vulnerability in SearchFeed Search Engine 1.3.2 and earlier allows remote attackers to inject arbitrary HTML and web script, possibly via the REQ parameter, which is used when performing a search...

CVE-2005-3867

Cross-site scripting XSS vulnerability in RevenuePilot Search Engine Script 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the REQ parameter, which is used when performing a search...

CVE-2005-3867

CVE-2005-3867 is an XSS vulnerability in RevenuePilot Search Engine Script 1.2.0 and earlier. The issue arises in the REQ parameter used when performing a search, allowing remote attackers to inject arbitrary web script or HTML. The NVD metrics indicate network access with medium complexity, no a...

CVE-2005-3867

Cross-site scripting XSS vulnerability in RevenuePilot Search Engine Script 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the REQ parameter, which is used when performing a search...