405 matches found
CVE-2005-3849: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the Search module in PmWiki up to 2.0.12 allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2005-3837
Cross-site scripting XSS vulnerability in the search module in sCssBoard 1.2 and 1.12, and earlier versions, allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter...
CVE-2005-3837
Cross-site scripting XSS vulnerability in the search module in sCssBoard 1.2 and 1.12, and earlier versions, allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter...
CVE-2005-3837
The CVE-2005-3837 issue is an XSS vulnerability in the search module of sCssBoard (versions 1.2, 1.12 and earlier). The underlying flaw is in the search_term parameter, allowing remote attackers to inject arbitrary script/HTML. Impact and exploit details are limited to what the sources state: a m...
CVE-2005-3837: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the search module in sCssBoard 1.2 and 1.12, and earlier versions, allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter...
CVE-2005-3792
Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with patch 3.1, allows remote attackers to execute arbitrary SQL commands, as demonstrated via the query parameter in a stories type...
CVE-2005-3792
Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with patch 3.1, allows remote attackers to execute arbitrary SQL commands, as demonstrated via the query parameter in a stories type...
CVE-2005-3792: Undefined Security Weakness
Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with patch 3.1, allows remote attackers to execute arbitrary SQL commands, as demonstrated via the query parameter in a stories type...
CVE-2005-3748
SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the query parameter...
CVE-2005-3748
SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the query parameter...
CVE-2005-3748: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the query parameter...
PHP-Nuke 7.8 Search Module - SQL Injection
PHP-Nuke 7.8 Search Module - SQL Injection !/usr/bin/perl -w use IO::Socket; if @ARGV new Proto = "tcp", PeerAddr = "$HOST", PeerPort = "80" || die " Connect FAILED\n"; print " Connected OK\n"; print " Sending exploit OK\n\n"; print $send "POST ".$GET." HTTP/1.0\n"; print $send "Host: ".%HOST."\n...
PHP-Nuke <= 7.8 Search Module Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================== PHP-Nuke new Proto = "tcp", PeerAddr = "$HOST", PeerPort = "80" || die " Connect FAILED\n"; print " Connected OK\n"; print " Sending exploit OK\n\n"; print $send "POST ".$GET."...
CVE-2005-3436
CVE-2005-3436 affects Nuked-Klan 1.7 with a cross-site scripting (XSS) vulnerability. The issue permits injection of arbitrary web script or HTML via multiple inputs: (1) the Search module, (2) specific fields in Guestbook, (3) the Forum module title, and (4) Textbox. The root cause is unsanitize...
CVE-2005-3436: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Nuked-Klan 1.7 allows remote attackers to inject arbitrary web script or HTML via the 1 Search module, 2 certain edit fields in Guestbook, 3 the title in the Forum module, and 4 Textbox...
PHP-Nuke Search Module - modules.php Directory Traversal
PHP-Nuke Search Module - modules.php Directory Traversal source: https://www.securityfocus.com/bid/15137/info PHPNuke Search Module is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input. A remote attacker may view files that are only...
[Full-disclosure] Security Advisory: SQL injection in PhpWebSite <= 0.10.1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ======================================================================== phpWebSite Security Advisory [email protected] http://phpwebsite.appstate.edu Kevin Wilcox 12 October 2005...
PT-2005-3706 · Maxdev · Maxdev Md-Pro
Name of the Vulnerable Software and Affected Versions: MAXdev MD-Pro versions 1.0.72 and earlier Description: The issue affects one or more modules in MAXdev MD-Pro, including the Download, Search, Web links, Blocks, Messages, News, Comments, Settings, Stats, or subjects modules. The impact and...
CVE-2005-2416
Multiple cross-site scripting XSS vulnerabilities in Contrexx before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the 1 term parameter to the search module or 2 title in the blog aggregation module...
CVE-2005-2416
Multiple cross-site scripting XSS vulnerabilities in Contrexx before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the 1 term parameter to the search module or 2 title in the blog aggregation module...