Gallery 1.21.3.x - Search Engine Cross-Site Scripting

Gallery 1.21.3.x - Search Engine Cross-Site Scripting source: https://www.securityfocus.com/bid/8288/info Gallery is prone to a cross-site scripting vulnerability. This issue is present in the search engine facility provided by the software. An attacker could exploit this issue by constructing a...

Gallery 1.2/1.3.x - Search Engine Cross-Site Scripting

source: https://www.securityfocus.com/bid/8288/info Gallery is prone to a cross-site scripting vulnerability. This issue is present in the search engine facility provided by the software. An attacker could exploit this issue by constructing a malicious link to the search engine that contains...

PHPNuke SQL Injection

PHPNuke SQL Injection 2-18-2003 http://CGIshield.com How to steal the password hash of the Admin user on PHPnuke 6.0 & 5.6 windows+linux method 1 PHPnuke, a widely used open-source web portal system, has been found to contain a remotely exploitable SQL injection bug, which allows stealing of the...

CVE-2002-1036

Cross-site scripting vulnerability in search.pl for Fluid Dynamics Search Engine FDSE before 2.0.0.0055 allows remote attackers to execute web script via the 1 Rank or 2 Match parameters...

Super Site Searcher - Remote Command Execution

source: https://www.securityfocus.com/bid/5605/info Super Site Searcher is prone to remote command execution. Shell metacharacters are not adequately filtered from query string parameters in a request to the vulnerable search engine script. The parameters are then used in a function which passes...

CVE-2002-1036

CVE-2002-1036 describes a cross-site scripting vulnerability in the Fluid Dynamics Search Engine (FDSE), specifically in search.pl. The issue allows remote attackers to inject and execute web script via the Rank or Match parameters on FDSE versions prior to 2.0.0.0055. The only details available ...

CVE-2002-1036

Cross-site scripting vulnerability in search.pl for Fluid Dynamics Search Engine FDSE before 2.0.0.0055 allows remote attackers to execute web script via the 1 Rank or 2 Match parameters...

Sun iPlanet and ONE Web Servers contain a buffer overflow in the search engine

Overview The Sun iPlanet Web Server and Sun ONE Web Server both ship with a search engine that is not enabled by default. A remotely exploitable buffer overflow exists in the search engine that could permit an attacker to execute arbitrary code on the system. Description The Sun iPlanet Web Serve...

XSS Hole in Fluid Dynamics search Engine

Name : FD Search Engine Vendor : Fluid Dynamics - http://www.xav.com Version : Probably all Demo : http://www.xav.com/search.pl Note : Sorry for my poor english ... ------------------------------------- PROBLEM For a multiple result pages search, the script uses the variable Rank wich contains...

Fluid Dynamics Search Engine 2.0 - Cross-Site Scripting

Fluid Dynamics Search Engine 2.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/5199/info Fluid Dynamics Search Engine is a search application for local and remote web sites, and is designed to work in most UNIX and Microsoft Windows environments. Fluid Dynamics Search Engine an...

iPlanet Remote File Viewing

Sun iPlanet Web Server Remote File Viewing Vulnerability Vendor: Sun Microsystems Product: iPlanet Web Server 6.0 SP2 iPlanet Web Server 4.1 SP9 Netscape Enterprise Server 3.6 Platforms: Windows 2000 Windows NT Other platforms not tested Category: Information Leak Author: [email protected]...

Fluid Dynamics Search Engine 2.0 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/5199/info Fluid Dynamics Search Engine is a search application for local and remote web sites, and is designed to work in most UNIX and Microsoft Windows environments. Fluid Dynamics Search Engine and is maintained by Zoltan Milosevic. It is possible for...

iPlanet Web Server 4.1 - Search Component File Disclosure

iPlanet Web Server 4.1 - Search Component File Disclosure source: https://www.securityfocus.com/bid/5191/info The iPlanet Web Server search engine is prone to a file disclosure vulnerability. It is possible for remote attackers to make requests to the search engine which will cause arbitrary...

iPlanet Web Server 4.1 - Search Component File Disclosure

source: https://www.securityfocus.com/bid/5191/info The iPlanet Web Server search engine is prone to a file disclosure vulnerability. It is possible for remote attackers to make requests to the search engine which will cause arbitrary readable files on the host running the vulnerable software to ...

CVE-2002-0537

The admin.html file in StepWeb Search Engine SWS 2.5 stores passwords in links to manager.pl, which allows remote attackers who can access the admin.html file to gain administrative privileges to SWS...

CVE-2002-0537

The admin.html file in StepWeb Search Engine SWS 2.5 stores passwords in links to manager.pl, which allows remote attackers who can access the admin.html file to gain administrative privileges to SWS...

CVE-2000-0180

The CVE-2000-0180 issue affects the Sojourn search engine through the sojourn.cgi CGI, where a directory-traversal (.. ) flaw allows remote attackers to read arbitrary files. The vulnerability enables information disclosure by exploiting the CGI’s input handling, executing with the web server’s p...

CVE-2000-0180

Sojourn search engine allows remote attackers to read arbitrary files via a .. dot dot attack...

AHG Search Engine 1.0 - search.cgi Arbitrary Command Execution

AHG Search Engine 1.0 - search.cgi Arbitrary Command Execution source: https://www.securityfocus.com/bid/3985/info Search.CGI is a component of the HTMLsearch Search Engine software distributed by AHG. The software is available for the Unix, Linux, and Microsoft platforms. The search.cgi script...

AHG Search Engine 1.0 - 'search.cgi' Arbitrary Command Execution

source: https://www.securityfocus.com/bid/3985/info Search.CGI is a component of the HTMLsearch Search Engine software distributed by AHG. The software is available for the Unix, Linux, and Microsoft platforms. The search.cgi script included with the AHG Search Engine does not adequately filter...