ezContents 2.0.3 search.php GLOBALS[language_home] Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/19776/info ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote fi...

sBlog 0.7.2 search.php keyword Variable POST Method XSS

No description provided by source. source: http://www.securityfocus.com/bid/17044/info sBlog is prone to HTML-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be...

phpBB 2.0.3 search.php Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6311/info phpBB is vulnerable to cross site scripting attacks. This is due to insufficient santization of user-supplied input. The problem is located in the search.php script. This issue may be exploited by an attacker to...

phxEventManager 2.0 beta 5 search.php search_terms SQL Injection

No description provided by source. Exploit Title: phxEventManager 2.0 beta 5 search.php searchterms SQL Injection Vulnerability Date: 01/03/2012 Author: skysbsb Software Link: http://sourceforge.net/projects/phxeventmanager/ Version: Web Application Tested on: Apache/nix Dork: intext: Powered by...

phpMyRealty <= 1.0.9 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. phpMyRealty = 1.0.9 pages.php id Remote SQL Injection Vulnerability Author: !DoktOR! Date found: 27.08.08 Product: phpMyRealty Version: 1.0.7, 1.0.9 Download script: http://rapidshare.com/files/123835319/phpMyRealty.v1.0.7.PHP-rs.rar Vulnerability Class: SQL...

DropAFew 0.2 search.php delete Action id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/23400/info DropAFew is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

QwikiWiki 1.5 Search.PHP Cross-Site Scripting Vulnerability

No description provided by source...

VBulletin 3.0 Search.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9656/info It has been reported that VBulletin is prone to a cross-site scripting vulnerability in the 'search.php' script. This issue is reportedly due to a failure to sanitize user input and so allow HTML and script code...

Joovili <= 3.0 - Multiple SQL Injection Vulnerabilities

No description provided by source. Joovili = 3.0 SQL Injection Vulnerability Author: !DoktOR! Date found: 27.08.08 Product: Joovili Version: 3.0 Price: $155 URL: www.joovili.com Download script: http://rapidshare.com/files/96178834/Joovili.Patch.3.0.12.Themes.WST.rar.html Vulnerability Class: SQL...

ProArcadeScript 'search.php' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/39749/info ProArcadeScript is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of...

CarLine Forum Russian Board 4.2 search.php text_poisk Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/14045/info Forum Russian Board is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out SQL Injection, cross-site scripting, and HTML injection attacks. Forum Russian Board 4.2 ...

W-Agora 4.2.1 search.php search_user Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/23057/info w-Agora is prone to multiple input-validation vulnerabilities, including possible SQL-injection issues and multiple cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data...

MyBulletinBoard RC4 search.php action Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/14553/info MyBulletinBoard is prone to multiple SQL injection vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...

glFusion 1.3.0 (search.php, cat_id param) - SQL Injection

No description provided by source...

PunBB 1.2.x Search.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15114/info PunBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result...

s-cms 2.5 - Multiple Vulnerabilities

No description provided by source. ============================================================ Exploit Title: S-CMS Multiple Vuln Date: 14/11/2010 Author: LordTittiS Greetings To: GodOfPain, SystemOveride Software Link: http://www.matteoiammarrone.com http://www.matteoiammarrone.com/public/s-cms...

Punbb 1.3.4 - Multiple Full Path Disclosure Vulnerability

No description provided by source. Exploit Title: Punbb 1.3.4 Full Path Disclosure Date: 07/11/2010 Author: SYSTEMOVERIDE, OverSecurityCrew Software Link: http://punbb.informer.com/ Vulnerability Type: Full Path Disclosure Version: 1.3.4 Vulnerability Details: The vulnerabilities are in the file...

Leszek Krupinski L-Forum 2.4 Search Script SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5468/info Reportedly, L-Forum is vulnerable to SQL injection attacks. The vulnerability lies in the file 'search.php' L-Forum does not properly sanitize user input that is used as part of the search parameter in the...

OlateDownload 3.4 search.php query Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/20278/info OlateDownload is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful explo...

BuzzyWall <= 1.3.1 (search.php search) SQL Injection Vulnerability

No description provided by source. BuzzyWall = 1.3.1 SQL Injection Vulnerability Author: !DoktOR! Date found: 31.08.08 Product: BuzzyWall Version: 1.3.1 Price: 40$ URL: www.buzzscripts.com Download script: http://nullstore.net/Reaper/4ptp1chdeais/BuzzyWall.v1.3.1.Nulled.rar.html Vulnerability...