CVE-2014-8320

The CVE-2014-8320 entry concerns Drupal's Custom Search module (6.x-1.x prior to 6.x-1.12 and 7.x-1.x prior to 7.x-1.14). The vulnerability is an XSS flaw where remote authenticated users with certain permissions can inject arbitrary web script or HTML via the "Label text" field on the results co...

CVE-2014-8745

Cross-site scripting XSS vulnerability in the Custom Search module 6.x-1.x before 6.x-1.13 and 7.x-1.x before 7.x-1.15 for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via a taxonomy vocabulary label...

Cross site scripting

Cross-site scripting XSS vulnerability in the Custom Search module 6.x-1.x before 6.x-1.13 and 7.x-1.x before 7.x-1.15 for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via a taxonomy vocabulary label...

CVE-2014-8745

The CVE-2014-8745 issue affects Drupal via the contributed Custom Search module (versions 6.x-1.x before 6.x-1.13 and 7.x-1.x before 7.x-1.15). The root cause is an unsanitized taxonomy vocabulary label displayed by the module, enabling Cross-Site Scripting (XSS). Exploitation requires remote aut...

CVE-2014-7870

Cross-site scripting XSS vulnerability in the Custom Search module 6.x-1.x before 6.x-1.12 and 7.x-1.x before 7.x-1.14 for Drupal allows remote authenticated users with the "administer custom search" permission to inject arbitrary web script or HTML via the "Label text" field to...

CVE-2014-7870

CVE-2014-7870 is a Drupal XSS vulnerability in the Custom Search module. Affected: Custom Search 6.x-1.x < 6.x-1.12 and 7.x-1.x

Jamroom 5.2.6 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Product: Jamroom Vendor: Talldude Networks, LLC Vulnerable Versions: 5.2.6 and probably prior Tested Version: 5.2.6 Advisory Publication: July 23, 2014 without technical details Vendor Notification: July 23, 2014 Vendor Patch: July 23, 2014...

Jamroom 5.2.6 Cross Site Scripting

Advisory ID: HTB23224 Product: Jamroom Vendor: Talldude Networks, LLC Vulnerable Versions: 5.2.6 and probably prior Tested Version: 5.2.6 Advisory Publication: July 23, 2014 without technical details Vendor Notification: July 23, 2014 Vendor Patch: July 23, 2014 Public Disclosure: August 13, 2014...

CVE-2014-4743

Multiple cross-site scripting XSS vulnerabilities in 1 searchajax.tpl and 2 searchajaxsmall.tpl in templates/default/tpl/modulesearch/ in the Search module modulesearch in Kajona before 4.5 allow remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2014-4743

Kajona CMS is prone to multiple XSS in the Search module (template files search_ajax.tpl and search_ajax_small.tpl). The vulnerability allows remote attackers to inject arbitrary web script or HTML via the search parameter. Affected product: Kajona before 4.5 (in the Search module). Root cause: i...

CVE-2014-4743

Multiple cross-site scripting XSS vulnerabilities in 1 searchajax.tpl and 2 searchajaxsmall.tpl in templates/default/tpl/modulesearch/ in the Search module modulesearch in Kajona before 4.5 allow remote attackers to inject arbitrary web script or HTML via the search parameter...

PT-2014-6089

Name of the Vulnerable Software and Affected Versions Kajona versions prior to 4.5 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Search module of Kajona. These vulnerabilities are located in the search ajax.tpl and search ajax small.tpl templates. They...

CVE-2014-4743: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in 1 searchajax.tpl and 2 searchajaxsmall.tpl in templates/default/tpl/modulesearch/ in the Search module modulesearch in Kajona before 4.5 allow remote attackers to inject arbitrary web script or HTML via the search parameter...

PHPNuke 5.6/6.0 Search Engine SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6887/info It has been reported that the search module distributed with PHPNuke is vulnerable to an SQL injection attack. PHPNuke, in some cases, does not sufficiently sanitize user-supplied input which is used when...

pMachine 1.0/2.x Search Module Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7981/info Reportedly, pMachine is vulnerable to a cross-site scripting attack. The vulnerability is present in the search module. The issue presents itself likely due to insufficient sanitization performed on user-supplie...

Basit 1.0 Search Module Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7142/info A cross-site scripting vulnerability has been reported for Basit. This vulnerability occurs due to insufficient sanitization of some user-supplied input. As a result of this deficiency an attacker may exploit th...

Tru-Zone Nuke ET 3.x Search Module SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15519/info Nuke ET is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resu...

PHP-Nuke <= 7.8 Search Module Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w use IO::Socket; if @ARGV 2 print ---------------------------------------\n; print EXPLOIT for PHPNuke =7.8 \n; print ---------------------------------------\n\n; print Usage : \n; print PHPNuke1 HOST /pathphpnuke \n\n; print HOST - Host where i...

PHP-Nuke <= 8.0 Final (sid) Remote SQL Injection Exploit

No description provided by source. ?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit'...

Scoop 1.1 RC1 Search Module Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/16014/info Scoop is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...