Rinkya Cross Site Scripting

Exploit Title: Rinkya Cross Site Scripting Date: 22.10.2011 - 17.52 Author: Mr.PaPaRoSSe Tested On: BackTrack 5 - Windows xp sp3 Platform: Php ------------------------------------------------------------- search.php http://www.rinkya.com/membership/search.php "alert"DDz Mr.PaPaRoSSe"...

Directory traversal

Directory traversal vulnerability in search.php3 aka search.php in W-Agora 4.2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the bn parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php3 aka search.php in W-Agora 4.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the bn parameter...

08CMS novel search-injected - scripts vulnerability-vulnerability warning-the black bar safety net

By: thexiaoCon A large cow, don't shoot the bricks, for the first time. | The following is quoted fragment: //Search for the word pre-processing $searchword = empty$searchword ? ": cutstrtrim$searchword,5 0,"; $da'searchword' = $searchword; if$searchword $filterstr .= $filterstr ? '&' :...

XSS issue in MantisBT

Net.Edit0r from BlACK Hat Group reported an XSS issue in search.php. All MantisBT users including anonymous users that are not logged in to public bug trackers could be impacted by this vulnerability...

CVE-2011-1131

The PlushSearch2 function in Search.php in Simple Machines Forum SMF before 1.1.13, and 2.x before 2.0 RC5, uses certain cached data in a situation where a temporary table has been created, even though this cached data is intended only for situations where a temporary table has not been created,...

Remote Command Execution in Spree search functionality

Spree versions prior to 0.60.2 contain a remote command execution vulnerability in the search functionality. The application fails to properly sanitize input passed via the search:send parameter, which is dynamically invoked using Ruby’s send method. This allows attackers to execute arbitrary she...

Sql injection

SQL injection vulnerability in search.aspx in BugTracker.NET 3.4.3 and earlier allows remote attackers to execute arbitrary SQL commands via a custom field to the search page...

Use google for beginners looking for exercise provided the right opportunity-vulnerability warning-the black bar safety net

Article author: wade821643 Use google for beginners looking for exercise provided the right opportunity Novices generally suffer no webshell, to practice providing the right skills. Online one by one to find the loopholes yourself in the upload webshell, very trouble, in case the sql to a query f...

phpcms2008 search. php injection vulnerability-vulnerability warning-the black bar safety net

| phpcms2008 search. php injection vulnerability --- http://www.worldream.net.cn/member/search.php?username=admin&dosubmit=%C1%A2%BC%B4%CB%D1%CB%F7&mod=member&file=&action=&disabled=0//and//1=2//union//select//1,username,3,4,password,6,7,8,9,1 0,1 1,1 2,1 3,1 4,1 5,1 6,1 7,1 8,1 9,2 0,2 1,2 2,2 3...

lineaCMS Cross Site Scripting

lineaCMS Cross Site Scripting Vulnerability Author : Phenom vendor : http://www.lineaphp.net language : PHP Dork : Powered by lineaCMS © 2006 lineaPHP Group Exploit : 1- http://server/path/search.php 2- type here your XSS...

WX Guest Book 1.1.208 SQL Injection / XSS

WX Guest Book 1.1.208 Vulns By learn3r hacker from nepal [email protected] Product name: WX Guestbook 1.1.208 Product vendor: www.webilix.com This product suffers from multiple SQLi and persistent XSS vuln. SQL Search Vuln The search parameters/queries we submit to the search.php are...

Multi Website 1.5 Cross Site Scripting

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Multi Website 1.5 Search Remote XSS Vulnerability + Software : Multi Website 1.5 + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi,...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in Ebay Clone 2009 allows remote attackers to inject arbitrary web script or HTML via the mode parameter...

CVE-2009-2241

The CVE-2009-2241 issue is an XSS vulnerability in the ASP Inline Corporate Calendar’s search.asp, exploitable via the keyword parameter. The affected component is the search function within the ASP Inline Corporate Calendar application; the underlying cause is improper handling of user-supplied ...

Microsoft Windows Search脚本注入漏洞(MS09-023)

BUGTRAQ ID: 35220 CVECAN ID: CVE-2009-0239 Windows Search允许即时搜索大多数公共文件和数据类型，例如电子邮件、联系人、日历约会、文档、照片、多媒体和由第三方扩展的其他格式。 Windows Search通过嵌入式的浏览器向用户预览搜索结果。为了支持非HTML/XML文件，Windows Search会将这类文件转换为HTML，但转换器在转义字符的时候没有执行任何过滤便将文件加载到了内嵌的浏览器中。根据嵌入式浏览器的安全设置，上述本地HTML文件无需用户同意便拥有部分JavaScript执行权限。...

CVE-2009-2032

Cross-site scripting XSS vulnerability in search.asp in PDshopPro, when downloaded before 20070308, allows remote attackers to inject arbitrary web script or HTML via the search parameter...

Unfixed XSS vulnerability at www.simpsonelectric.com

Security researcher sharpskater80, has submitted on 05/07/2009 a cross-site-scripting XSS vulnerability affecting www.simpsonelectric.com, which at the time of submission ranked 3759135 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in miniPortail 2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified argument, probably the search string...

CVE-2008-4268

The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation for a Windows Search file, which allows remote attackers to execute arbitrary code via a crafted saved-search file, aka "Windows Saved Search Vulnerability."...