lolipop.ch XSS vulnerability

Vulnerable URL: https://www.lolipop.ch/de/suche?orderby=position=descquery=9999"%20onfocus="alert'openbugbounty'"%20autofocus/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 269644...

CVE-2016-3533

Unspecified vulnerability in the Oracle Knowledge Management component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Search. NOTE: the previous information is from the July 2016 CPU. Oracle has not...

DEBIAN-CVE-2016-5733

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 a crafted table name that is mishandled during privilege checking in...

la-madeleine-carrefour.com XSS vulnerability

Vulnerable URL: http://www.la-madeleine-carrefour.com/recherche.html?q=''"/alert"openbugbounty"...

ashlandnazarene.com XSS vulnerability

Vulnerable URL: http://www.ashlandnazarene.com/search.php?pageID=search= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website...

nextorch.com XSS vulnerability

Vulnerable URL: http://www.nextorch.com/en/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1931639 Google Pagerank| 3 VIP website status:| No Check nextorch.com SSL...

ilo.org XSS vulnerability

Vulnerable URL: http://www.ilo.org/Search4/search.do?searchWhat==language=docdatetime=0==0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 20752 Google Pagerank| 0 VIP website...

CVE-2006-3174

Cross-site scripting XSS vulnerability in search.php in SquirrelMail 1.5.1 and earlier, when registerglobals is enabled, allows remote attackers to inject arbitrary HTML via the mailbox parameter...

lg.com XSS vulnerability

Vulnerable URL: http://www.lg.com/africaen/search.lg Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1366 Google Pagerank| 7 VIP website status:| Yes Check lg.com SSL connection:|...

Netlux Antivirus Search Path Local Elevation of Privilege Vulnerability

Netlux Antivirus is a suite of antivirus software from Netlux India. The program offers features such as security against all types of viruses, trojans, malwares and spyware. Netlux Antivirus handles path searches with a security vulnerability that allows local attackers can exploit to elevate...

CVE-2014-5098

Cross-site scripting XSS vulnerability in the Search module before 1.2.2 in Jamroom allows remote attackers to inject arbitrary web script or HTML via the query string to search/results/...

CVE-2014-3538

file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service CPU consumption via a crafted file that triggers backtracking during processing of an awk rule. NOTE: this vulnerability exists because of an...

MaxWebPortal 1.30 search.asp Search Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/7837/info A number of vulnerabilities have been discovered in the MaxWebPortal. The issues that have been discovered include: MaxWebPortal 'search.asp' has been reported prone to a cross-site scripting vulnerability. An...

linksys wrt54gl firmware 4.30.15 build 2 - Multiple Vulnerabilities

Device Name: Linksys WRT54GL v1.1 Vendor: Linksys/Cisco ============ Vulnerable Firmware Releases: ============ Firmware Version: 4.30.15 build 2, 01/20/2011 ============ Device Description: ============ The Router lets you access the Internet via a wireless connection, broadcast at up to 54 Mbps...

程氏舞曲CMS最新版某处SQL注射漏洞（官方演示站）

简要描述： 今天刚看到这个网站，于是就射了一吧！ 详细说明： 在歌曲搜索的地方，敲了一个单引号，于是就出现了如下的错误，其中单引号要转码为%27 http://demo.chshcms.com/index.php/dance/so/key/%27 然后构造了一下http://demo.chshcms.com/index.php/dance/so/key/wooyun' or '%'=' 转码后为http://demo.chshcms.com/index.php/dance/so/key/wooyun%27%20or%20%27%25%27%3D%27 所有的歌曲都查询出来了！...

CVE-2013-5930

CVE-2013-5930 affects the Real Estate PHP Script, specifically the search_residential.php endpoint. It is a cross-site scripting (XSS) vulnerability exploitable via the bos parameter, allowing remote attackers to inject arbitrary scripts/HTML. The NVD entry notes a CVSS v2 base score of 4.3 (Medi...

CVE-2012-6589

CVE-2012-6589 Description: A cross-site scripting (XSS) vulnerability exists in MYRE Business Directory, specifically in search.php via the look parameter. Remote attackers could inject arbitrary web script or HTML. Affected component: MYRE Business Directory (search.php).Root cause: Unvalidated ...

Server: ACLs inoperative in some search scenarios

The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute...

CodeBlocks 12.11 (OSX) - Crash (PoC)

CodeBlocks 12.11 OSX - Crash PoC Exploit Title: CodeBlocks 12.11 Mac OS X Crash POC Date: 27-05-2013 Exploit Author: ariarat Vendor Homepage: http://www.codeblocks.org Software Link: http://sourceforge.net/projects/codeblocks/files/Binaries/12.11/MacOS/codeblocks-12.11-mac.dmg Version: 12.11 Test...

CVE-2013-1897

The dosearch function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1.3.0.5 does not properly restrict access to entries when the nsslapd-allow-anonymous-access configuration is set to rootdse and the BASE search scope is used, which allows remote...