333 matches found
Cross-Site Scripting vulnerability in Xaraya
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в системе Xaraya. XSS: Уязвимость в index.php в параметре d. http://site/?module=search&q=';alertdocument.cookie;// В последних версиях системы уязвимость уже исправлена. Дополнительная информация о данной уязвимост...
CVE-2008-2915
Multiple SQL injection vulnerabilities in jobseekers/JobSearch.php aka the search module in Pre Job Board allow remote attackers to execute arbitrary SQL commands via the 1 position or 2 kw parameter...
CVE-2008-2839
Cross-site scripting XSS vulnerability in the search module in Traindepot 0.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to index.php...
CVE-2008-2839
Cross-site scripting XSS vulnerability in the search module in Traindepot 0.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to index.php...
CVE-2008-2839
CVE-2008-2839 is a reported cross-site scripting (XSS) vulnerability in the Traindepot 0.1 search module. The issue arises when an attacker can inject arbitrary script or HTML through the query parameter to index.php, potentially affecting users who load the affected page. The provided data ident...
CVE-2008-2839
Cross-site scripting XSS vulnerability in the search module in Traindepot 0.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to index.php...
Pre Job Board - 'JobSearch.php' SQL Injection
--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Pre Job Board JobSearch.php Remote SQL Injection Vulnerability +==-- --==+====================================================================================+==-- - dreaming of necessity is reason ...
Movable Type vulnerabile to cross-site scripting
Overview Movable Type, a web log system from Six Apart, contains a cross-site scripting vulnerability in its search module. Impact An arbitrary script may be executed on the user's web browser. In addition, if session information from a cookie is leaked, session hijacking could be conducted...
CVE-2008-0461
SQL injection vulnerability in index.php in the Search module in PHP-Nuke 8.0 FINAL and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the sid parameter in a comments action to modules.php. NOTE: some of these details are obtained from thir...
CVE-2008-0461
CVE-2008-0461 concerns a SQL injection in PHP-Nuke’s Search module. The vulnerability resides in index.php for PHP-Nuke 8.0 FINAL and earlier when magic_quotes_gpc is disabled. An attacker can craft requests exploiting the sid parameter in a “comments” action to modules.php to execute arbitrary S...
phpnuke80final-sql.txt
?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit' $result=sendit'CONCAT"::",aid,"::",pwd,"::"'; if...
PHP-Nuke <= 8.0 Final (sid) Remote SQL Injection Exploit
No description provided by source. ?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit'...
PHP-Nuke <= 8.0 Final (sid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================== PHP-Nuke = 8.0 Final sid Remote SQL Injection Exploit ======================================================== ?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for...
PHP-Nuke 8.0 Final - sid SQL Injection
PHP-Nuke 8.0 Final - sid SQL Injection ?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit'...
PHP-Nuke 8.0 Final - 'sid' SQL Injection
?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit' $result=sendit'CONCAT"::",aid,"::",pwd,"::"'; if...
CVE-2008-0092
Cross-site scripting XSS vulnerability in index.php in the search module in Appalachian State University phpWebSite 1.4.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in the search module in Appalachian State University phpWebSite 1.4.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2008-0092
Cross-site scripting XSS vulnerability in index.php in the search module in Appalachian State University phpWebSite 1.4.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
Code injection
Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...