Atrise Everyfind 5.0.2 search Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8740/info It has been reported that Atrise Everyfind is prone to a cross-site scripting vulnerability due to insufficient sanitization of user-supplied input. The problem exists in the search module of the software. This...

PHPNuke 6.x Category Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9630/info It has been reported that PHPNuke may prone to a SQL injection vulnerability, due to insufficient sanitization user-supplied input. The problem is reported to exist in the $category variable contained within the...

Axis Commerce (E-Commerce System) Stored XSS

No description provided by source. Exploit Title: Axis Commerce E-Commerce System Stored XSS Date: 19.08.2011 Author: Eyup CELIK Software Link: https://github.com/downloads/axis/axiscommerce/axis-0.8.1.zip Version: 0.8.1 and previus Tested on: Apache For Windows ISSUE Vulnerable Modules = Search...

OkCupid: XSS in "Questions" search module

So I was browsing the website, looking at users and such and came across the link: "Y'all got some issues" which takes you to the following link: http://www.okcupid.com/profile/quadhonk/questions?cf=regularindirect which also has a search function. Giving it the above string will show you the...

Jamroom 5.0.2 Cross Site Scripting Vulnerability

Jamroom version 5.0.2 suffers from a cross site scripting vulnerability. Product: Jamroom Vendor: Talldude Networks, LLC Vulnerable Versions: 5.0.2 and probably prior Tested Version: 5.0.2 Advisory Publication: November 13, 2013 without technical details Vendor Notification: November 13, 2013...

CVE-2013-6804

Cross-site scripting XSS vulnerability in the Search module before 1.1.1 for Jamroom allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to search/results/all/1/4...

Cross site scripting

Cross-site scripting XSS vulnerability in the Search module before 1.1.1 for Jamroom allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to search/results/all/1/4...

CVE-2013-6804

Jamroom is affected by a Cross-Site Scripting (XSS) vulnerability in the Search module prior to version 1.1.1. The issue arises from insufficient sanitisation of the HTTP POST parameter search_string sent to /search/results/all/1/4, allowing remote attackers to inject arbitrary HTML/JavaScript. T...

CVE-2013-6804

Cross-site scripting XSS vulnerability in the Search module before 1.1.1 for Jamroom allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to search/results/all/1/4...

CVE-2013-6804: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Search module before 1.1.1 for Jamroom allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to search/results/all/1/4...

PT-2013-4987

Name of the Vulnerable Software and Affected Versions Google Site Search module versions 6.x-1.x before 6.x-1.4 Google Site Search module versions 7.x-1.x before 7.x-1.10 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML by causing crafted...

Mozilla WebMaker - Filter Bypass & Cross Site Vulnerability

Document Title: =============== Mozilla WebMaker - Filter Bypass & Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=981 Mozilla Bug ID: 835445 Release Date: ============= 2013-07-09 Vulnerability Laboratory ID VL-ID:...

Cross site scripting

Cross-site scripting XSS vulnerability in the PRH Search module 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers from certain sources to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-6576

The CVE-2012-6576 entry concerns a Cross-site scripting (XSS) vulnerability in the Drupal PRH Search module (7.x-1.x) prior to 7.x-1.1. It allows remote attackers from certain sources to inject arbitrary web script or HTML via unspecified vectors. Affected software is the Drupal PRH Search module...

CVE-2012-6576: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the PRH Search module 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers from certain sources to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-5228

Cross-site scripting XSS vulnerability in the Search module quickstart/search in appRain CMF 0.1.5 allows remote attackers to inject arbitrary web script or HTML via the ss parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the Search module quickstart/search in appRain CMF 0.1.5 allows remote attackers to inject arbitrary web script or HTML via the ss parameter...

CVE-2011-5228

Cross-site scripting XSS vulnerability in the Search module quickstart/search in appRain CMF 0.1.5 allows remote attackers to inject arbitrary web script or HTML via the ss parameter...

CVE-2011-5228

AppRain CMF is vulnerable to Cross-Site Scripting (XSS) in the Search module (quickstart/search) for version 0.1.5 and earlier (

CVE-2011-5228: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Search module quickstart/search in appRain CMF 0.1.5 allows remote attackers to inject arbitrary web script or HTML via the ss parameter...