CVE-2010-4932

Cross-site scripting XSS vulnerability in search.php in Entrans before 0.3.3 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2010-4932

CVE-2010-4932 describes a reflected XSS in Entrans prior to 0.3.3, affecting the file search.php via the query parameter. The root cause is insufficient input sanitization, allowing remote attackers to inject arbitrary HTML/JavaScript executed in the victim’s browser. The linked advisories provid...

CVE-2010-4909

Multiple cross-site scripting XSS vulnerabilities in PaysiteReviewCMS 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 q parameter to search.php or the 2 image parameter to image.php...

CVE-2011-2938

Multiple cross-site scripting XSS vulnerabilities in filterapi.php in MantisBT before 1.2.7 allow remote attackers to inject arbitrary web script or HTML via a parameter, as demonstrated by the projectid parameter to search.php...

Unfixed XSS vulnerability at dlh.net

Security researcher livinskull, has submitted on 13/09/2011 a cross-site-scripting XSS vulnerability affecting dlh.net, which at the time of submission ranked 65062 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currently...

DragDropCart Cross Site Scripting

Exploit Title: DragDropCart E-Commerce System Stored XSS Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability ISSUE Cross Site Scripting can be done using the command input Vulnerable Page: search.php yaxaluser.php Example: search.php?search= Exploit: "/...

Vbulletin 4.0.x => 4.1.3 (messagegroupid) SQL injection Vulnerability 0-day

No description provided by source. Exploit Title: Vbulletin 4.0.x = 4.1.3 messagegroupid SQL injection Vulnerability 0-day Google Dork: intitle: powered by Vbulletin 4 Date: 20/07/2011 Author: FB1H2S Software Link: urlhttp://www.vbulletin.com//url Version: 4.x.x Tested on: relevant os CVE :...

vBulletin 4.0.x 4.1.3 - 'messagegroupid' SQL Injection

Exploit Title: Vbulletin 4.0.x = 4.1.3 messagegroupid SQL injection Vulnerability 0-day Google Dork: intitle: powered by Vbulletin 4 Date: 20/07/2011 Author: FB1H2S Software Link: urlhttp://www.vbulletin.com//url Version: 4.x.x Tested on: relevant os CVE : urlhttp://members.vbulletin.com//url...

vBulletin 4.0.x => 4.1.2 (search.php) SQL Injection Vulnerability

No description provided by source. ==================================================================== vBulletin 4.0.x = 4.1.2 search.php SQL Injection Vulnerability ==================================================================== 888 d8 888 888 ,d d8 e88\888 d88 888-\ 888 e 888-88e ,d888 d8...

Design/Logic Flaw

The PlushSearch2 function in Search.php in Simple Machines Forum SMF before 1.1.13, and 2.x before 2.0 RC5, uses certain cached data in a situation where a temporary table has been created, even though this cached data is intended only for situations where a temporary table has not been created,...

CVE-2011-1131

The PlushSearch2 function in Search.php in Simple Machines Forum SMF before 1.1.13, and 2.x before 2.0 RC5, uses certain cached data in a situation where a temporary table has been created, even though this cached data is intended only for situations where a temporary table has not been created,...

CVE-2011-1131

SMF: The PlushSearch2 function in Search.php affects SMF 1.1.13 and SMF 2.x up to 2.0 RC5, where cached data may be used in a scenario with a temporary table, potentially allowing remote attackers to retrieve sensitive information via a search. Impact is a partial confidentiality breach; no integ...

cubecart 2.0.7 - Multiple Vulnerabilities

cubecart 2.0.7 - Multiple Vulnerabilities Exploit Title: CubeCart 2.0.7 XSS && Remote SQL Injection = Multiple Vulnerabilities Date: June, 14th 2011 GMT +7 Author: Shamus Software Link: http://www.cubecart.com/ Version : CubeCart 2.0.7 Tested on: windows 7, ubuntu 11.04 CVE : -...

vBulletin 4.0.x SQL Injection / Cross Site Request Forgery

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

vBulletin 4.0.x 4.1.2 - 'search.php' SQL Injection

==================================================================== vBulletin 4.0.x = 4.1.2 search.php SQL Injection Vulnerability ==================================================================== 888 d8 888 888 ,d d8 e88\888 d88 888-\ 888 e 888-88e ,d888 d88 d888 888 d888 888 888d8b 888 888b...

vBulletin 4.1.2 SQL Injection

==================================================================== vBulletin 4.0.x = 4.1.2 search.php SQL Injection Vulnerability ==================================================================== 888 d8 888 888 ,d d8 e88\888 d88 888-\ 888 e 888-88e ,d888 d88 d888 888 d888 888 888d8b 888 888b...

CVE-2010-4796

Multiple SQL injection vulnerabilities in PHPYun 1.1.6 allow remote attackers to execute arbitrary SQL commands via the 1 provinceid parameter to search.php and the 2 e parameter to resumeview.php...

Sql injection

Multiple SQL injection vulnerabilities in PHPYun 1.1.6 allow remote attackers to execute arbitrary SQL commands via the 1 provinceid parameter to search.php and the 2 e parameter to resumeview.php...

Уязвимости в MyBB

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и SQL DB Structure Extraction уязвимостях в MyBB. Уязвимости имеют место в скриптах search.php и private.php. XSS WASC-08: http://websecurity.com.ua/uploads/2011/MyBB20XSS.html...

AWCM 2.x - search.php Cross-Site Scripting

AWCM 2.x - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47126/info AWCM is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to...