95 matches found
CVE-2005-4284: Undefined Security Weakness
Cross-site scripting XSS vulnerability in StaticStore Search Engine 1.189A and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to search.cgi, possibly the keywords parameter. NOTE: this issue was originally disputed by the vendor, but it has since...
CVE-2005-4032
Cross-site scripting XSS vulnerability in search.cgi in Easy Search System 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2005-4032
CVE-2005-4032 describes a cross-site scripting (XSS) vulnerability in search.cgi of Easy Search System 1.1 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML through the q parameter. The available connected documents confirm the existence of the vulnerability and...
CVE-2005-4041
CVE-2005-4041 describes a cross-site scripting (XSS) vulnerability in the search.cgi component of MR CGI Guy Hot Links SQL 3.1.x and Hot Links Pro 3.1.x. The issue arises from injecting arbitrary script/HTML via the query string, enabling an attacker to trigger client-side code in affected users’...
CVE-2005-4042
CVE-2005-4042 describes a Cross-site scripting (XSS) vulnerability in Warm Links versions 1.0.0 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via a parameter to search.cgi. The available sources corroborate the vulnerable component (Warm Links) and the inpu...
CVE-2005-4042
Cross-site scripting XSS vulnerability in Warm Links 1.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to search.cgi...
CVE-2005-4044: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search.cgi in Amazon Search Directory 1.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly the search parameter...
CVE-2005-4042: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Warm Links 1.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to search.cgi...
CVE-2005-4032: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search.cgi in Easy Search System 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2005-4041: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search.cgi in MR CGI Guy Hot Links SQL 3.1.x and Hot Links Pro 3.1.x allows remote attackers to inject arbitrary web script or HTML via the query string...
Easy Search System 1.1 - search.cgi Cross-Site Scripting
Easy Search System 1.1 - search.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/15705/info Easy Search System is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in t...
CVE-2002-2113
search.cgi in AGH HTMLsearch 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the template parameter...
CVE-2002-2113: Undefined Security Weakness
search.cgi in AGH HTMLsearch 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the template parameter...
Mnogosearch search.cgi Detection
Binary data 2499.prm...
CVE-2003-0436
Buffer overflow in search.cgi for mnoGoSearch 3.1.20 allows remote attackers to execute arbitrary code via a long ul parameter...
CVE-2003-0436
The CVE-2003-0436 issue affects mnoGoSearch 3.1.20, with a buffer overflow in search.cgi triggered by a long ul parameter that enables remote code execution with the webserver’s privileges. The Conectiva advisory Colorado 2003:711 notes this vulnerability and provides upgrade guidance to a newer ...
CVE-2003-0436: Undefined Security Weakness
Buffer overflow in search.cgi for mnoGoSearch 3.1.20 allows remote attackers to execute arbitrary code via a long ul parameter...
CVE-2003-0437: Undefined Security Weakness
Buffer overflow in search.cgi for mnoGoSearch 3.2.10 allows remote attackers to execute arbitrary code via a long tmplt parameter...
CVE-2002-0789: Undefined Security Weakness
Buffer overflow in search.cgi in mnoGoSearch 3.1.19 and earlier allows remote attackers to execute arbitrary code via a long query q parameter...