Code injection

Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.cgi uall or mall parameter...

CVE-2018-19191

Vulnerability (CVE-2018-19191): Webmin 1.890 is vulnerable to a cross-site scripting (XSS) flaw. The flaw allows an unauthenticated, remote attacker to trigger arbitrary script execution in a user’s browser by getting a user to click a specially crafted URL. Affected parameters include /config.cg...

CVE-2018-19191: Improper Neutralization of Input During Web Page Generation

Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.cgi uall or mall parameter...

meyerbos.com XSS vulnerability

Open Bug Bounty ID: OBB-671533 Description| Value ---|--- Affected Website:| meyerbos.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

opening.jp XSS vulnerability

Open Bug Bounty ID: OBB-533495 Description| Value ---|--- Affected Website:| opening.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

timetable.waikato.ac.nz XSS vulnerability

Vulnerable URL: https://timetable.waikato.ac.nz/perl-bin/exams/search.cgi Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline:...

logosradionetwork.com XSS vulnerability

Open Bug Bounty ID: OBB-262238 Description| Value ---|--- Affected Website:| logosradionetwork.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lenntech.com XSS vulnerability

Vulnerable URL: http://www.lenntech.com/cgi-bin/search.cgi?q=confirmOPENBUGBOUNTY//...

CVE-2016-4897: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in 1 filter/saveforward.cgi, 2 filter/save.cgi, 3 /man/search.cgi in Usermin before 1.690...

guxme.de XSS vulnerability

Vulnerable URL: https://www.guxme.de/cgi-bin/g/search.cgi Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1156501 VIP website status:| No Check guxme.de SSL connection:| Grade: A...

Usermin cross-site scripting vulnerabilties

Overview Usermin is a web-based interface used to manage webmail. Usermin contains reflected cross-site scripting vulnerabilities in /filter/saveforward.cgi, /filter/save.cgi and /man/search.cgi. Toshinobu Honjo of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC...

nymag.com XSS vulnerability

Vulnerable URL: http://nymag.com/search/search.cgi?fd=All=Relevance|0type=sw=0= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1737 Google Pagerank| 7 VIP website status:| Yes Chec...

MNOGoSearch 3.1.20 Search.CGI UL Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/7865/info mnoGoSearch 'search.cgi' has been reported prone to a buffer overflow vulnerability. The issue is a result of a lack of sufficient bounds checking performed on user-supplied URI parameters that are passed to the...

MNOGoSearch 3.1.20 Search.CGI UL Buffer Overflow Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/7865/info mnoGoSearch 'search.cgi' has been reported prone to a buffer overflow vulnerability. The issue is a result of a lack of sufficient bounds checking performed on user-supplied URI parameters that are passed to the...

mnoGoSearch search.cgi QUERY_STRING Parameter Parsing Arbitrary File Access

The version of mnoGoSearch installed on the remote host is affected by an arbitrary file access vulnerability due to a flaw in the 'search.cgi' script when parsing user-supplied input from the QUERYSTRING parameter. An unauthenticated, remote attacker can leverage this issue by sending a speciall...

CVE-2010-2367

Cross-site scripting XSS vulnerability in search.cgi in AD-EDIT2 before 3.0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-2367

Cross-site scripting XSS vulnerability in search.cgi in AD-EDIT2 before 3.0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-2367: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.cgi in AD-EDIT2 before 3.0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4866

The CVE-2009-4866 entry covers a Cross-site scripting (XSS) vulnerability in Matt's Script Archive (MSA) Simple Search 1.0’s search.cgi, where an attacker can inject arbitrary script or HTML via the terms parameter. The OpenVAS NASL corroborates this by listing Simple Search AS XSS vulnerability....

CVE-2009-4866

Cross-site scripting XSS vulnerability in search.cgi in Matt's Script Archive MSA Simple Search 1.0 allows remote attackers to inject arbitrary web script or HTML via the terms parameter. NOTE: some of these details are obtained from third party information...