333 matches found
CVE-2008-4268
The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation for a Windows Search file, which allows remote attackers to execute arbitrary code via a crafted saved-search file, aka "Windows Saved Search Vulnerability."...
CVE-2008-4438
Cross-site scripting XSS vulnerability in search.php in Datafeed Studio 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
织梦(dedecms)2007 group/search.php注入漏洞
group/search.php ................................................................................................ ifempty$sad $sad = "t"; ifempty$keyword ShowMsg"错误,请输入搜索关键字！","-1"; exit; if$sad=="g" $searchtable = "@groups"; $WhereSql = "WHERE ishidden=0 AND groupname like '%".$keyword."%'";...
CVE-2008-1435
CVE-2008-1435 (Windows Saved Search Vulnerability) affects Windows Vista (up to SP1) and Windows Server 2008. A remote code execution flaw arises when saving crafted saved-search (.search-ms) files, due to insecure parsing/handling by Windows Explorer. Exploitation requires a user to open and sav...
CVE-2008-2848
Cross-site scripting XSS vulnerability in the search functionality in MindTouch DekiWiki before 8.05.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Sql injection
SQL injection vulnerability in search.asp in Xigla Absolute Form Processor XE 4.0 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter...
Sleipnir and Grani vulnerable to arbitrary script execution when Bookmark search results are restored from history
Overview Sleipnir and Grani, web browsers from Fenrir & Co., contain a vulnerability in the bookmark search function that allows an attacker to execute an arbitrary script when search results are restored from history. Sleipnir and Grani, web browsers from Fenrir & Co., have a bookmark search...
CVE-2008-2181
CVE-2008-2181 affects cpLinks 1.03, exposing multiple XSS vulnerabilities in search.php via the search_text and search_category parameters. The XSS is reportedly triggered by a forced SQL error message. Public references and NVD entries corroborate the description. No remediation or patch details...
Design/Logic Flaw
Unquoted Windows search path vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075, and Server before 1.0.4 Build 56528 allows local users to gain...
sybase-xss.txt
http://www.sybase.com/ Search suffers from a cross site scripting vulnerability...
CVE-2007-4386
SQL injection vulnerability in search.php in GetMyOwnArcade allows remote attackers to execute arbitrary SQL commands via the query parameter...
CVE-2007-2578
Unspecified vulnerability in search/list/actionsearch/index.php in ACP3 4.0 beta 3 allows remote attackers to have unknown impact, relating to "Cookie Manipulation", via the formsearchterm parameter...
CVE-2007-2321
Unspecified vulnerability in the search functionality in SilverStripe 2.0.0 has unknown impact and attack vectors...
Unfixed XSS vulnerability at forum.ormanlim.com
Security researcher St@rExT, has submitted on 22/04/2007 a cross-site-scripting XSS vulnerability affecting forum.ormanlim.com, which at the time of submission ranked 1456308 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/04/2007. It is...
Cross site scripting
Cross-site scripting XSS vulnerability in search/SearchResults.aspx in Community Server allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2007-0595
CVE-2007-0595 : A cross-site scripting (XSS) vulnerability exists in the search function of the High 5 Review Site, exploitable via the q parameter (search box). The connected documents reiterate this description and do not provide additional technical details about affected versions, root cause ...
CVE-2007-0144
The CVE-2007-0144 entry documents a Cross-site scripting (XSS) vulnerability in search.asp of Digitizing Quote And Ordering System 1.0. The issue allows remote authenticated attackers to inject arbitrary web script or HTML via the ordernum parameter. The NVD notes a MEDIUM base score (6.8) with n...
phpBB SearchIndexer Mod - 'archive_topic.php' Remote File Inclusion
!/usr/bin/perl pbpbb archive for search engines Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://mambopower.net/ http://www.mamb...
CVE-2006-4058
CVE-2006-4058 is an XSS vulnerability in archive.php for Simplog 0.9.3 and earlier, allowing remote attackers to inject arbitrary web script or HTML via the keyw parameter during a search. The description explicitly notes this vulnerability affects Simplog versions up to 0.9.3 and earlier. Connec...