346 matches found
CVE-2014-7870
Cross-site scripting XSS vulnerability in the Custom Search module 6.x-1.x before 6.x-1.12 and 7.x-1.x before 7.x-1.14 for Drupal allows remote authenticated users with the "administer custom search" permission to inject arbitrary web script or HTML via the "Label text" field to...
CVE-2014-7870
CVE-2014-7870 is a Drupal XSS vulnerability in the Custom Search module. Affected: Custom Search 6.x-1.x < 6.x-1.12 and 7.x-1.x
Jamroom 5.2.6 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Product: Jamroom Vendor: Talldude Networks, LLC Vulnerable Versions: 5.2.6 and probably prior Tested Version: 5.2.6 Advisory Publication: July 23, 2014 without technical details Vendor Notification: July 23, 2014 Vendor Patch: July 23, 2014...
Jamroom 5.2.6 Cross Site Scripting
Advisory ID: HTB23224 Product: Jamroom Vendor: Talldude Networks, LLC Vulnerable Versions: 5.2.6 and probably prior Tested Version: 5.2.6 Advisory Publication: July 23, 2014 without technical details Vendor Notification: July 23, 2014 Vendor Patch: July 23, 2014 Public Disclosure: August 13, 2014...
CVE-2014-4743
Multiple cross-site scripting XSS vulnerabilities in 1 searchajax.tpl and 2 searchajaxsmall.tpl in templates/default/tpl/modulesearch/ in the Search module modulesearch in Kajona before 4.5 allow remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2014-4743
Kajona CMS is prone to multiple XSS in the Search module (template files search_ajax.tpl and search_ajax_small.tpl). The vulnerability allows remote attackers to inject arbitrary web script or HTML via the search parameter. Affected product: Kajona before 4.5 (in the Search module). Root cause: i...
Axis Commerce (E-Commerce System) Stored XSS
No description provided by source. Exploit Title: Axis Commerce E-Commerce System Stored XSS Date: 19.08.2011 Author: Eyup CELIK Software Link: https://github.com/downloads/axis/axiscommerce/axis-0.8.1.zip Version: 0.8.1 and previus Tested on: Apache For Windows ISSUE Vulnerable Modules = Search...
PHPNuke 5.6/6.0 Search Engine SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6887/info It has been reported that the search module distributed with PHPNuke is vulnerable to an SQL injection attack. PHPNuke, in some cases, does not sufficiently sanitize user-supplied input which is used when...
Atrise Everyfind 5.0.2 search Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8740/info It has been reported that Atrise Everyfind is prone to a cross-site scripting vulnerability due to insufficient sanitization of user-supplied input. The problem exists in the search module of the software. This...
Basit 1.0 Search Module Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7142/info A cross-site scripting vulnerability has been reported for Basit. This vulnerability occurs due to insufficient sanitization of some user-supplied input. As a result of this deficiency an attacker may exploit th...
PHPNuke 6.x Category Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9630/info It has been reported that PHPNuke may prone to a SQL injection vulnerability, due to insufficient sanitization user-supplied input. The problem is reported to exist in the $category variable contained within the...
pMachine 1.0/2.x Search Module Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7981/info Reportedly, pMachine is vulnerable to a cross-site scripting attack. The vulnerability is present in the search module. The issue presents itself likely due to insufficient sanitization performed on user-supplie...
PHP-Nuke <= 7.8 Search Module Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w use IO::Socket; if @ARGV 2 print ---------------------------------------\n; print EXPLOIT for PHPNuke =7.8 \n; print ---------------------------------------\n\n; print Usage : \n; print PHPNuke1 HOST /pathphpnuke \n\n; print HOST - Host where i...
Scoop 1.1 RC1 Search Module Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/16014/info Scoop is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
PHP-Nuke <= 8.0 Final (sid) Remote SQL Injection Exploit
No description provided by source. ?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit'...
Tru-Zone Nuke ET 3.x Search Module SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15519/info Nuke ET is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resu...
OkCupid: XSS in "Questions" search module
So I was browsing the website, looking at users and such and came across the link: "Y'all got some issues" which takes you to the following link: http://www.okcupid.com/profile/quadhonk/questions?cf=regularindirect which also has a search function. Giving it the above string will show you the...
Jamroom 5.0.2 Cross Site Scripting Vulnerability
Jamroom version 5.0.2 suffers from a cross site scripting vulnerability. Product: Jamroom Vendor: Talldude Networks, LLC Vulnerable Versions: 5.0.2 and probably prior Tested Version: 5.0.2 Advisory Publication: November 13, 2013 without technical details Vendor Notification: November 13, 2013...
CVE-2013-6804
Cross-site scripting XSS vulnerability in the Search module before 1.1.1 for Jamroom allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to search/results/all/1/4...
Cross site scripting
Cross-site scripting XSS vulnerability in the Search module before 1.1.1 for Jamroom allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to search/results/all/1/4...