CVE-2014-2235

Cross-site scripting XSS vulnerability in Askbot before 0.7.49 allows remote attackers to inject arbitrary web script or HTML via vectors related to the question search form...

CVE-2014-2235

Cross-site scripting XSS vulnerability in Askbot before 0.7.49 allows remote attackers to inject arbitrary web script or HTML via vectors related to the question search form...

CVE-2014-2235

Cross-site scripting XSS vulnerability in Askbot before 0.7.49 allows remote attackers to inject arbitrary web script or HTML via vectors related to the question search form...

CVE-2014-2235: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Askbot before 0.7.49 allows remote attackers to inject arbitrary web script or HTML via vectors related to the question search form...

PT-2014-4574

Name of the Vulnerable Software and Affected Versions Askbot versions prior to 0.7.49 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The vulnerabilities are related to vectors...

PT-2014-4573

Name of the Vulnerable Software and Affected Versions Askbot versions prior to 0.7.49 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vectors related to the question search form. Recommendations For versions prior to 0.7.49, update t...

CVE-2013-3413: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the search form in the administration/monitoring panel on the Cisco Identity Services Engine ISE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuh87036...

Netcraft.com Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: www.netcraft.com - Search Form Cross-site Scripting vulnerability Advisory ID: SSCHADV2013-008 Author: Stefan Schurtz Affected Software: Successfully tested on www.netcraft.com Vendor URL: http://www.netcraft.com Vendor Status: fixed...

Yii Framework 1.1.8 - Search SQL Injection

Yii Framework 1.1.8 - Search SQL Injection Exploit Title: Yii Framework - Search SQL Injection Vulnerability Google Dork: No Dork Date: 20/11/2012 Exploit Author: Junookyo Vendor Homepage: http://www.yiiframework.com/ Software Link: http://www.yiiframework.com/download/ Version: 1.1.8 maybe anoth...

Yii Framework 1.1.8 Search SQL Injection

Exploit Title: Yii Framework - Search SQL Injection Vulnerability Google Dork: No Dork Date: 20/11/2012 Exploit Author: Junookyo Vendor Homepage: http://www.yiiframework.com/ Software Link: http://www.yiiframework.com/download/ Version: 1.1.8 maybe another version Vulnerability: SQL Injection via...

Yii Framework 1.1.8 - Search SQL Injection

Exploit Title: Yii Framework - Search SQL Injection Vulnerability Google Dork: No Dork Date: 20/11/2012 Exploit Author: Junookyo Vendor Homepage: http://www.yiiframework.com/ Software Link: http://www.yiiframework.com/download/ Version: 1.1.8 maybe another version Vulnerability: SQL Injection via...

WIS Coldfusion Exploit

Exploit for windows platform in category dos / poc Exploit Title: WIS Coldfusion Exploit Date: 9-9-2012 Author: Noxxie Vendor or Software Link: http://www.wis.nl/Onzeklanten link that also shows customers , gives an idea of inpact Version: All versions with search form are affected Category::...

ASP-DEv XM Forums RC 3 SQL Injection

. \ || \ \ \ / \ /\ \ |/ \ | / \ | | / | Y Y / \ | \ \ /|| |||| / /| / / / / / Exploit Title: ASP-DEv XM Forums RC 3 Remote Post Sql Injection Vulnerability Google Dork: Intext:"Powered by ASP-DEv XM Forums RC 3" Date: 08/29/2012 Author: Crim3R Site : Http://Ajaxtm.com/ Download Link :...

CVE-2010-1733: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via 1 multiple inventory fields to the search form, reachable through index.php; or 2 the "Software name" field to the "All softwares" search form, reachable through...

CVE-2009-2451

Multiple SQL injection vulnerabilities in index.php in MIM:InfiniX 1.2.003 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters in a calendar action, or 3 a search term in the search form...

Malicious search plugins can inject code into arbitrary sites — Mozilla

Security researcher Prateek Saxena reported that a malicious MozSearch plugin could be created using a javascript: URI in the SearchForm value. This URI is used as the default landing page when an empty search is performed. If an attacker could get a user to install the malicious plugin and perfo...

NovaBoard 1.0.1 Cross Site Scripting

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= NovaBoard eNYe-Sec - www.enye-sec.org -- About the program by the author's page -- NovaBoard is a free, feature rich community message board software written in PHP & MySQL that allows you to set up your own forum within minutes. With a smart modules feature...

Getacoder clone (sb_protype) Remote SQL Injection Vulnerability

No description provided by source. || | | Getacoder Clone Script sbprotype Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

Getacoder clone - 'sb_protype' SQL Injection

|| | | Getacoder Clone Script sbprotype Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

ppBlog cross-site scripting vulnerability

Overview ppBlog, a weblog program written in PHP, contains a cross-site scripting vulnerability in its search form. Impact A remote attacker could execute a malicious script. Solution...