Command injection

IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to execute arbitrary commands with root privileges via the search field...

Ipswitch WS_FTP LE 12.3 - Search field Overwrite (SEH) (PoC)

Ipswitch WSFTP LE 12.3 - Search field Overwrite SEH PoC !/usr/bin/python Author: Zahid Adeel Author Email: [email protected] Title: Ipswitch WSFTP LE 12.3 - Search field SEH Overwrite POC Vendor Homepage: http://www.wsftple.com/ Software Link: http://www.wsftple.com/download.aspx Version: L...

Ipswitch WS_FTP LE 12.3 - Search field Overwrite (SEH) (PoC)

Exploit for windows platform in category dos / poc !/usr/bin/python Author: Zahid Adeel Author Email: email protected Title: Ipswitch WSFTP LE 12.3 - Search field SEH Overwrite POC Vendor Homepage: http://www.wsftple.com/ Software Link: http://www.wsftple.com/download.aspx Version: LE 12.3 Tested...

Ipswitch WS_FTP LE 12.3 - Search field Overwrite (SEH) (PoC)

!/usr/bin/python Author: Zahid Adeel Author Email: [email protected] Title: Ipswitch WSFTP LE 12.3 - Search field SEH Overwrite POC Vendor Homepage: http://www.wsftple.com/ Software Link: http://www.wsftple.com/download.aspx Version: LE 12.3 Tested on: Windows 8.1 x64 Pro Date: 2016-05-10...

Connections <= 8.5.8 - Reflected Cross-Site Scripting (XSS)

Line 320 contains unfiltered user input for the search field being sent directly via echo back to the users browser via the ’s’ variable. In file includes/admin/pages/manage.php Line 320:...

hipsroadedition.com XSS vulnerability

Vulnerable URL: http://www.hipsroadedition.com/search.php?searchfield=Year=%22%3E%3C/script%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

The vulnerability of the Firefox OS operating system allows a hacker to inject arbitrary HTML code.

The vulnerability of the Gaia Search app for the Firefox OS operating system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code by manipulating the title and search engine field of...

Multiple Cross-Site Scripting Vulnerabilities in SearchBlox

SearchBlox is the U.S. SearchBlox company a set of open source and free of charge based on Lucene full-text search engine toolkit to build enterprise search and analytics solutions. The program provides a Web-based management interface , you can manage the entire search system . A cross-site...

CVE-2015-2064

Multiple cross-site scripting XSS vulnerabilities in DLGuard 5, 4.6, and 4.5 allow remote attackers to inject arbitrary web script or HTML via the 1 page, 2 c, or 3 redirect parameter to index.php or 4 search field searchTerm parameter in the main page...

CVE-2015-2064

Multiple cross-site scripting XSS vulnerabilities in DLGuard 5, 4.6, and 4.5 allow remote attackers to inject arbitrary web script or HTML via the 1 page, 2 c, or 3 redirect parameter to index.php or 4 search field searchTerm parameter in the main page...

Plain Black WebGUI 'style-underground/search' cross-site scripting vulnerability

WebGUI is a CMS Content Management System software that is mainly used to facilitate the publishing and maintenance of website content. A cross-site scripting vulnerability exists in Plain Black WebGUI 'style-underground/search'. This allows remote attackers to execute arbitrary web script or HTM...

CVE-2015-1564

Cross-site scripting XSS vulnerability in style-underground/search in Plain Black WebGUI 7.10.29 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search field...

CVE-2013-4754

Multiple cross-site scripting XSS vulnerabilities in Owl Intranet Knowledgebase 1.10 allow remote authenticated users to inject arbitrary web script or HTML via 1 the Search field to browse.php or 2 the Title field to prefs.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.11.9 and earlier allow remote authenticated users to inject arbitrary web script or HTML via 1 the Search field in an inbox action to messaging/messagebox.php, 2 the "First name" field to auth/profile.php, or 3 the Speakers field in...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Owl Intranet Knowledgebase 1.10 allow remote authenticated users to inject arbitrary web script or HTML via 1 the Search field to browse.php or 2 the Title field to prefs.php...

CVE-2013-4754

Multiple cross-site scripting XSS vulnerabilities in Owl Intranet Knowledgebase 1.10 allow remote authenticated users to inject arbitrary web script or HTML via 1 the Search field to browse.php or 2 the Title field to prefs.php...

Better Search < 1.3.5 - Reflected Cross-Site Scripting (XSS)

By submitting the JavaScript below to the search field Reflected Cross-Site Scripting XSS is possible...

AV Arcade Search Field XSS/HTML Injection

No description provided by source. Exploit Title: AV Arcade Search Field XSS/HTML Injection Date: 6/5/2010 Author: Vadim Toptunov, http://www.twitter.com/pentesting Software Link: http://www.avscripts.net/avarcade/ Version: 5.1.4 Free and Pro latest and prior Tested on: Any NIX CVE : N/a Code :...

CVE-2013-4694

Stack-based buffer overflow in genjumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a package with a long Skin directory name. NOTE: a second buffer overflow involving a long GUI Search field to mllocal.d...

Stack overflow

Stack-based buffer overflow in genjumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a package with a long Skin directory name. NOTE: a second buffer overflow involving a long GUI Search field to mllocal.d...