424 matches found
PT-2012-2205
Name of the Vulnerable Software and Affected Versions appRain CMF version 0.1.5 Description The issue is related to a cross-site scripting XSS vulnerability in the Search module. This allows remote attackers to inject arbitrary web script or HTML via the ss parameter in the quickstart/search...
CVE-2012-1656
The CVE-2012-1656 issue affects the Drupal Multisite Search module (6.x-2.2). The module does not sufficiently escape user input when constructing queries, enabling SQL injection via the Site table prefix field by remote authenticated users with certain permissions. Affected: Multisite Search mod...
ShopperPress v2.7 Wordpress - Cross Site Vulnerabilities
Title: ====== ShopperPress v2.7 Wordpress - Cross Site Vulnerabilities Date: ===== 2012-08-02 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=670 VL-ID: ===== 670 Common Vulnerability Scoring System: ==================================== 2.4 Introduction: =============...
CVE-2012-4744
Cross-site scripting XSS vulnerability in ssearch.php in the Siche search module 0.5 for Zeroboard allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2012-4743
Multiple SQL injection vulnerabilities in ssearch.php in Siche search module 0.5 for Zeroboard allow remote attackers to execute arbitrary SQL commands via the 1 ss, 2 sm, 3 align, or 4 category parameters...
Cross site scripting
Cross-site scripting XSS vulnerability in ssearch.php in the Siche search module 0.5 for Zeroboard allows remote attackers to inject arbitrary web script or HTML via the search parameter...
Sql injection
Multiple SQL injection vulnerabilities in ssearch.php in Siche search module 0.5 for Zeroboard allow remote attackers to execute arbitrary SQL commands via the 1 ss, 2 sm, 3 align, or 4 category parameters...
CVE-2012-4743
Multiple SQL injection vulnerabilities in ssearch.php in Siche search module 0.5 for Zeroboard allow remote attackers to execute arbitrary SQL commands via the 1 ss, 2 sm, 3 align, or 4 category parameters...
CVE-2012-4744
CVE-2012-4744 describes a Cross-site scripting (XSS) vulnerability in ssearch.php of the Siche search module 0.5 for Zeroboard. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the search parameter. The NVD entry lists a CVSSv2 base score of 4.3 (Medium) with n...
CVE-2012-4743
The CVE-2012-4743 entry describes multiple SQL injection vulnerabilities in the Siche search module (Siche search module 0.5) for Zeroboard, exploitable via the parameters (ss, sm, align, category) in ssearch.php. The underlying issue is insecure handling of input in ssearch.php that allows remot...
CVE-2012-4744: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in ssearch.php in the Siche search module 0.5 for Zeroboard allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2012-4743: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in ssearch.php in Siche search module 0.5 for Zeroboard allow remote attackers to execute arbitrary SQL commands via the 1 ss, 2 sm, 3 align, or 4 category parameters...
PT-2012-5570
Name of the Vulnerable Software and Affected Versions Siche search module version 0.5 for Zeroboard Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the search parameter in the...
PT-2012-5569
Name of the Vulnerable Software and Affected Versions Siche search module version 0.5 for Zeroboard Description The issue concerns SQL injection vulnerabilities in the ssearch.php file of the Siche search module. Remote attackers can execute arbitrary SQL commands by manipulating certain...
Nike+ Panel / Mobile App Cross Site Scripting
Exploit for php platform in category web applications Nike+ Panel & Mobile App - Multiple Web Vulnerabilities Details: ======== Multiple persistent input validation vulnerabilities are detected in the Nike+ Control Panel & fuelband mobile web application. The bug allows an attackers to...
phpcms V9 phpcms\modules\search\index.php 任意读文件
No description provided by source...
Netjuke 1.0 RC1 - SQL Injection Vulnerabilities
Title: ====== Netjuke 1.0 RC1 - SQL Injection Vulnerabilities Date: ===== 2012-04-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=506 VL-ID: ===== 506 Introduction: ============= The Netjuke is a Web-Based Audio Streaming Jukebox powered by PHP 4, a database and all...
Drupal 7.x Search Module Path Disclosure
Drupal 7.x Search Module - Full Path Disclosure ============== Summary Full path disclosure due to insufficient input validation in the search module. ============== Description Performing a search with the "keys" parameter set as an array, an error message shows the full path of the Drupal...