346 matches found
CVE-2013-6804
Jamroom is affected by a Cross-Site Scripting (XSS) vulnerability in the Search module prior to version 1.1.1. The issue arises from insufficient sanitisation of the HTTP POST parameter search_string sent to /search/results/all/1/4, allowing remote attackers to inject arbitrary HTML/JavaScript. T...
CVE-2013-6804
Cross-site scripting XSS vulnerability in the Search module before 1.1.1 for Jamroom allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to search/results/all/1/4...
Mozilla WebMaker - Filter Bypass & Cross Site Vulnerability
Document Title: =============== Mozilla WebMaker - Filter Bypass & Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=981 Mozilla Bug ID: 835445 Release Date: ============= 2013-07-09 Vulnerability Laboratory ID VL-ID:...
Cross site scripting
Cross-site scripting XSS vulnerability in the PRH Search module 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers from certain sources to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-6576
The CVE-2012-6576 entry concerns a Cross-site scripting (XSS) vulnerability in the Drupal PRH Search module (7.x-1.x) prior to 7.x-1.1. It allows remote attackers from certain sources to inject arbitrary web script or HTML via unspecified vectors. Affected software is the Drupal PRH Search module...
CVE-2011-5228
Cross-site scripting XSS vulnerability in the Search module quickstart/search in appRain CMF 0.1.5 allows remote attackers to inject arbitrary web script or HTML via the ss parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in the Search module quickstart/search in appRain CMF 0.1.5 allows remote attackers to inject arbitrary web script or HTML via the ss parameter...
CVE-2011-5228
Cross-site scripting XSS vulnerability in the Search module quickstart/search in appRain CMF 0.1.5 allows remote attackers to inject arbitrary web script or HTML via the ss parameter...
CVE-2011-5228
AppRain CMF is vulnerable to Cross-Site Scripting (XSS) in the Search module (quickstart/search) for version 0.1.5 and earlier (
CVE-2012-1656
The CVE-2012-1656 issue affects the Drupal Multisite Search module (6.x-2.2). The module does not sufficiently escape user input when constructing queries, enabling SQL injection via the Site table prefix field by remote authenticated users with certain permissions. Affected: Multisite Search mod...
ShopperPress v2.7 Wordpress - Cross Site Vulnerabilities
Title: ====== ShopperPress v2.7 Wordpress - Cross Site Vulnerabilities Date: ===== 2012-08-02 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=670 VL-ID: ===== 670 Common Vulnerability Scoring System: ==================================== 2.4 Introduction: =============...
CVE-2012-4743
Multiple SQL injection vulnerabilities in ssearch.php in Siche search module 0.5 for Zeroboard allow remote attackers to execute arbitrary SQL commands via the 1 ss, 2 sm, 3 align, or 4 category parameters...
CVE-2012-4744
Cross-site scripting XSS vulnerability in ssearch.php in the Siche search module 0.5 for Zeroboard allows remote attackers to inject arbitrary web script or HTML via the search parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in ssearch.php in the Siche search module 0.5 for Zeroboard allows remote attackers to inject arbitrary web script or HTML via the search parameter...
Sql injection
Multiple SQL injection vulnerabilities in ssearch.php in Siche search module 0.5 for Zeroboard allow remote attackers to execute arbitrary SQL commands via the 1 ss, 2 sm, 3 align, or 4 category parameters...
CVE-2012-4744
CVE-2012-4744 describes a Cross-site scripting (XSS) vulnerability in ssearch.php of the Siche search module 0.5 for Zeroboard. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the search parameter. The NVD entry lists a CVSSv2 base score of 4.3 (Medium) with n...
CVE-2012-4743
Multiple SQL injection vulnerabilities in ssearch.php in Siche search module 0.5 for Zeroboard allow remote attackers to execute arbitrary SQL commands via the 1 ss, 2 sm, 3 align, or 4 category parameters...
CVE-2012-4743
The CVE-2012-4743 entry describes multiple SQL injection vulnerabilities in the Siche search module (Siche search module 0.5) for Zeroboard, exploitable via the parameters (ss, sm, align, category) in ssearch.php. The underlying issue is insecure handling of input in ssearch.php that allows remot...
Nike+ Panel / Mobile App Cross Site Scripting
Exploit for php platform in category web applications Nike+ Panel & Mobile App - Multiple Web Vulnerabilities Details: ======== Multiple persistent input validation vulnerabilities are detected in the Nike+ Control Panel & fuelband mobile web application. The bug allows an attackers to...
