MvMmall 网店商城系统 /search.php SQL注入漏洞

No description provided by source...

CVE-2015-6009: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Web Reference Database aka refbase through 0.9.6 allow remote attackers to execute arbitrary SQL commands via 1 the where parameter to rss.php or 2 the sqlQuery parameter to search.php, a different issue than CVE-2015-7382...

PT-2015-7112

Name of the Vulnerable Software and Affected Versions refbase versions prior to 0.9.7 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the where parameter to "rss.php" or the sqlQuery parameter to "search.php". Recommendations For versions...

sandrasilvers.com XSS vulnerability

Vulnerable URL: http://sandrasilvers.com/x/search.php?user=sandrasilvers=Rit" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1801718 Google Pagerank| 2 VIP website status:| No Chec...

rohinishops.com XSS vulnerability

Vulnerable URL: http://www.rohinishops.com/search.php?txtsearch====10" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3094588 Google Pagerank| 0 VIP website status:| No Check...

raabmed.com XSS vulnerability

Vulnerable URL: http://www.raabmed.com/search.php?txtsearch=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Che...

MetInfo5.3 search.php SQL注入漏洞

在search.php文件中:$module=intval$module; if$class1$module=0; ifintval$module $serchsql.=" where lang='$lang' and recycle='0' or recycle='-1' and displaytype='1' "; else $class1info=$classlist$class1; if!$class1infookinfo'../',$pagelangnoid; $class1sql=" class1='$class1' "; $class2sql="...

ledalux.com XSS vulnerability

Vulnerable URL: http://www.ledalux.com/search.php Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6938007 Google Pagerank| 2 VIP website status:| No Check...

personalimpressions.com XSS vulnerability

Vulnerable URL: http://www.personalimpressions.com/search.php?search=' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1018884 Google Pagerank| 2 VIP website status:| No Check...

pedalon.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-85162 Description| Value ---|--- Affected Website:| pedalon.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mskd-ru.net XSS vulnerability

Vulnerable URL: http://mskd-ru.net/search.php?query=--="word=1name=1 Details: Description| Value ---|--- Patched:| Yes, at 25.09.2015 Latest check for patch:| 25.09.2015 09:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 254550 Google Pagerank| 3 VIP website...

kentfind.co.uk XSS vulnerability

Vulnerable URL: http://www.kentfind.co.uk/search.php?search=derp " Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 236608 Google Pagerank| 3 VIP website status:| No Check...

PT-2015-7280

Name of the Vulnerable Software and Affected Versions sysPass versions 1.0.9 and earlier Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the search parameter to the "ajax/ajax search.php" API endpoint. Recommendations For sysPass...

mischief-films.com XSS vulnerability

Vulnerable URL: http://www.mischief-films.com/htm/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8274137 Google Pagerank| 3 VIP website status:| No Check...

laptopkey.com XSS vulnerability

Vulnerable URL: https://www.laptopkey.com/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 207933 Google Pagerank| 2 VIP website status:| No Check laptopkey.com SSL...

prisma-ind.com XSS vulnerability

Vulnerable URL: http://www.prisma-ind.com/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Check...

nafilasports.com XSS vulnerability

Vulnerable URL: http://www.nafilasports.com/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Check...

super-brothers.com XSS vulnerability

Vulnerable URL: http://www.super-brothers.com/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Check...

sibcos.com XSS vulnerability

Vulnerable URL: http://sibcos.com/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Check sibcos.com SSL...

mizasports.com XSS vulnerability

Vulnerable URL: http://www.mizasports.com/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 2 VIP website status:| No Check...