Lucene search
+L

216 matches found

Prion
Prion
added 2009/05/29 10:30 p.m.14 views

Stack overflow

Stack-based buffer overflow in Soulseek 156 and 157 NS allows remote attackers to execute arbitrary code via a long search query...

10CVSS8.7AI score0.08572EPSS
SaveExploits4References6Affected Software1
Cvelist
Cvelist
added 2009/05/05 8:0 p.m.38 views

CVE-2009-1468

Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote authenticated users to execute arbitrary SQL commands via the 1 sql and 2 orderby elements in an XML search query...

7.9AI score0.01925EPSS
SaveExploits3References6
Packet Storm
Packet Storm
added 2008/11/17 12:0 a.m.20 views

boutikone-xss.txt

BoutikOne CMS - Cross Site Scripting XSS Vulnerability http://www.boutikone.com/ XSS fOUND BY d3v1l - http://security-sh3ll.com/forum.php Bug :- searchquery=XSS Example :- http://www.un-monde-mystique.com/search.php?lang=1&sort=Ref&searchquery='"alert1337XSS...

7.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2008/06/04 12:0 a.m.86 views

dotCMS search-results.dot search_query Parameter XSS

The remote host is using dotCMS, an open source J2EE / Java web content management system. The version of dotCMS installed on the remote host fails to sanitize input to the 'searchquery' parameter of the 'search-results.dot' script before using it to generate dynamic HTML output. An attacker may ...

4.3CVSS5.8AI score0.01022EPSS
SaveExploits0References3
NVD
NVD
added 2008/02/29 12:44 a.m.16 views

CVE-2008-1076

Cross-site scripting XSS vulnerability in search.php in Interspire Shopping Cart 1.x allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS5.6AI score0.01022EPSS
SaveExploits0References3
seebug.org
seebug.org
added 2008/01/17 12:0 a.m.17 views

PHP-RESIDENCE 0.7.2 (Search) Remote SQL Injection Vulnerability

No description provided by source. PHPRESIDENCE 0.7.2 Remote Sql Injection BY IRCRASH AUTHOR :&n...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2008/01/16 12:0 a.m.16 views

PHP-RESIDENCE 0.7.2 - Search SQL Injection

PHP-RESIDENCE 0.7.2 - Search SQL Injection PHPRESIDENCE 0.7.2 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH R3d.W0rm Script Download : http://www.digitaldruid.net/download/php-residence0.7.2.zip Vulnerability Page:...

0.3AI score
SaveExploits0
NVD
NVD
added 2007/05/24 7:30 p.m.27 views

CVE-2007-2858

SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via the Search Query field...

6.5CVSS8AI score0.009EPSS
SaveExploits0References4
Prion
Prion
added 2007/05/24 7:30 p.m.15 views

Sql injection

SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via the Search Query field...

6.5CVSS8.7AI score0.009EPSS
SaveExploits0References4Affected Software1
Packet Storm
Packet Storm
added 2007/05/22 12:0 a.m.39 views

iptrack-sql.txt

Information: The IP-Tracking Mod is a Extension for phpBB2.0.x which logs all Page hits the user of the Boards do including Referer, IP and Username. It contains a SQL-Injection on Admin-Level. You can get it from: http://www.phpbb.de/viewtopic.php?t=63690&postdays=0&postorder=asc&start=0 Steps t...

7.4AI score
SaveExploits0
Prion
Prion
added 2007/04/25 3:19 p.m.17 views

Sql injection

SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents via 1 the ofinterest parameter in a light search query, 2 description parameter in the advanced search query, and possibly other vectors...

6.5CVSS8.4AI score0.02029EPSS
SaveExploits1References12
securityvulns
securityvulns
added 2006/06/06 12:0 a.m.75 views

A-shop v0.70 SQL INECTION

Product : A-shop Version : v0.70 Vulnerability : SQL INJECTION http://www.rammdev.com/ashop/demo/default.asp?mod=search&type=simple&q='SQLINJECTION'&cmdSearch=Search Example ; http://www.rammdev.com/ashop/demo/default.asp?mod=search&type=simple&q='unionselect201,1,1,120from20users'&cmdSearch=Sear...

0.9AI score
SaveExploits0
Exploit DB
Exploit DB
added 2005/12/21 12:0 a.m.18 views

SyntaxCMS - Search Query Cross-Site Scripting

source: https://www.securityfocus.com/bid/16033/info SyntaxCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of...

4.3CVSS5.8AI score0.01748EPSS
SaveExploits1
NVD
NVD
added 2005/12/20 11:3 a.m.18 views

CVE-2005-4394

Cross-site scripting XSS vulnerability in EPiX 3.1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search query parameters...

4.3CVSS5.8AI score0.01177EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2005/12/20 11:0 a.m.20 views

CVE-2005-4394

Cross-site scripting XSS vulnerability in EPiX 3.1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search query parameters...

5.8AI score0.01177EPSS
SaveExploits0References5
exploitpack
exploitpack
added 2002/08/15 12:0 a.m.13 views

Google Toolbar 1.1.60 - Search Function Denial of Service

Google Toolbar 1.1.60 - Search Function Denial of Service source: https://www.securityfocus.com/bid/5477/info Reportedly, when the Google Toolbar receives a search query it may cause Microsoft Internet Explorer to crash. When a user views a malicious web page it will cause the Google Toolbar to...

SaveExploits0
Rows per page
Query Builder