Netjuke 1.0 RC1 - SQL Injection Vulnerabilities

Title: ====== Netjuke 1.0 RC1 - SQL Injection Vulnerabilities Date: ===== 2012-04-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=506 VL-ID: ===== 506 Introduction: ============= The Netjuke is a Web-Based Audio Streaming Jukebox powered by PHP 4, a database and all...

Drupal 7.x Search Module Path Disclosure

Drupal 7.x Search Module - Full Path Disclosure ============== Summary Full path disclosure due to insufficient input validation in the search module. ============== Description Performing a search with the "keys" parameter set as an array, an error message shows the full path of the Drupal...

CVE-2012-1069

Cross-site scripting XSS vulnerability in module/kb/searchword in the search module in lknSupport allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

Cross site scripting

Cross-site scripting XSS vulnerability in module/kb/searchword in the search module in lknSupport allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2012-1069

Cross-site scripting XSS vulnerability in module/kb/searchword in the search module in lknSupport allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

iknSupport 'search' Module - Cross-Site Scripting

source: https://www.securityfocus.com/bid/51803/info iknSupport is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

vBulletin v4.1.10 - Path Information Disclosure

Document Title: =============== vBulletin v4.1.10 - Path Information Disclosure References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=387 Release Date: ============= 2012-01-15 Vulnerability Laboratory ID VL-ID: ==================================== 387 Product...

PHPCMS 9 index.php 本地文件包含漏洞

phpcms/modules/search/index.php 代码如下： public function publicgetsuggestkeyword $url = $GET'url'.'&q='.$GET'q'; $res = @filegetcontents$url; ifCHARSET != 'gbk' $res = iconv'gbk', CHARSET, $res; echo $res;...

Joomla! Component Vik Real Estate 1.0 - Multiple Vulnerabilities

Joomla! Component Vik Real Estate 1.0 - Multiple Vulnerabilities Vik Real Estate 1.0 Component Joomla Multiple Blind Sql Injection Release Date Bug. 27-Oct-2011 Date Added. 30-Sep-2011 Vendor Notification Date. Never Product. Vik Real Estate Platform. Joomla Affected versions. 1.0 Type. Commercia...

NetCat CMS Multiple Vulnerabilities

NetCat CMS version 5.0.1 suffers from cross site scripting and HTTP parameter pollution vulnerabilities. Exploit Title: NetCat CMS Code exec, SQL-injection Google Dork: none Date: 28.11.2010 Author: brainpillow Software Link: http://netcat.ru/ Version: UNKNOWN On different versions of this softwa...

Axis Commerce (E-Commerce System) - Persistent Cross-Site Scripting

Axis Commerce E-Commerce System - Persistent Cross-Site Scripting Exploit Title: Axis Commerce E-Commerce System Stored XSS Date: 19.08.2011 Author: Eyup CELIK Software Link: https://github.com/downloads/axis/axiscommerce/axis-0.8.1.zip Version: 0.8.1 and previus Tested on: Apache For Windows ISS...

Axis Commerce (E-Commerce System) Stored XSS

Exploit for php platform in category web applications Exploit Title: Axis Commerce E-Commerce System Stored XSS Date: 19.08.2011 Author: Eyup CELIK Software Link: https://github.com/downloads/axis/axiscommerce/axis-0.8.1.zip Version: 0.8.1 and previus Tested on: Apache For Windows ISSUE Vulnerabl...

Axis Commerce (E-Commerce System) - Persistent Cross-Site Scripting

Exploit Title: Axis Commerce E-Commerce System Stored XSS Date: 19.08.2011 Author: Eyup CELIK Software Link: https://github.com/downloads/axis/axiscommerce/axis-0.8.1.zip Version: 0.8.1 and previus Tested on: Apache For Windows ISSUE Vulnerable Modules = Search Module XSS can be done using the...

Axis Commerce 0.8.1 Cross Site Scripting

Exploit Title: Axis Commerce E-Commerce System Stored XSS Date: 19.08.2011 Author: Eyup CELIK Software Link: https://github.com/downloads/axis/axiscommerce/axis-0.8.1.zip Version: 0.8.1 and previus Tested on: Apache For Windows ISSUE Vulnerable Modules = Search Module XSS can be done using the...

PHP-Nuke Search module SQL injection vulnerability and fix-vulnerability warning-the black bar safety net

Affected version: PHP-Nuke 7.0 - 8.1.0.3.5 b Vulnerabilitydescription: PHP-Nuke is a popular web site creation and management tools, you can use many databasessoftwareas backend, such as MySQL, PostgreSQL, mSQL and Interbase, Sybase, etc. PHP-Nuke Search module in the realization of the presence...

XSS vulnerability in SantaFox search module

Vulnerability ID: HTB22593 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinsantafoxsearchmodule.html Product: SantaFox Vendor: artprom http://www.santafox.ru/ Vulnerable Version: 2.02 and Probably Prior Versions Vendor Notification: 23 August 2010 Vulnerability Type: XSS Cross Site...

phpWebSite search module cross-site scripting vulnerability-vulnerability warning-the black bar safety net

phpWebSite is a Web Content Management SystemCMS. phpWebSite realization on the presence of input validation vulnerabilities, a remote attacker could exploit this vulnerability in the user's browser to execute malicious code. phpWebSite search module does not properly escape user input in the...

phpWebSite search module cross-site scripting vulnerability-vulnerability warning-the black bar safety net

Affected systems: Appalachian State Universit phpWebSite 1.4.0 Description: BUGTRAQ ID: 2 7 0 9 0 phpWebSite is a Web Content Management SystemCMS. phpWebSite realization on the presence of input validation vulnerabilities, a remote attacker could exploit this vulnerability in the user's browser ...

XSS vulnerability in Pligg search module

Vulnerability ID: HTB22467 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpliggsearchmodule.html Product: Pligg Vendor: Pligg, LLC http://www.pligg.com/demo/ Vulnerable Version: 1.0.4 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: XSS Cross Site...

Joomla! Component MyHome - Blind SQL Injection

Joomla! Component MyHome - Blind SQL Injection Name : Joomla commyhome BSQLi Vulnerability Date : july 10,2010 Critical Level : HIGH vendor URL :http://www.unisoft.me/ Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger greetz t...