Unfixed XSS vulnerability at www.liveanalsex.com

Security researcher Mystick, has submitted on 04/11/2008 a cross-site-scripting XSS vulnerability affecting www.liveanalsex.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2009. It is currentl...

Unfixed XSS vulnerability at www.mymusicjob.com

Security researcher SaMTHG, has submitted on 04/07/2008 a cross-site-scripting XSS vulnerability affecting www.mymusicjob.com, which at the time of submission ranked 709062 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2008. It is...

CVE-2008-1621

Multiple cross-site scripting XSS vulnerabilities in GeeCarts allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 show.php, 2 search.php, and 3 view.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Unfixed XSS vulnerability at www.urscorp.com

Security researcher Kaospunk, has submitted on 29/03/2008 a cross-site-scripting XSS vulnerability affecting www.urscorp.com, which at the time of submission ranked 223983 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008. It is...

CVE-2008-1352

Directory traversal vulnerability in search.php in EdiorCMS ecms 3.0 allows remote attackers to read arbitrary files via a .. dot dot in the SearchTemplate parameter during a Title search...

CVE-2008-1352

Directory traversal vulnerability in search.php in EdiorCMS ecms 3.0 allows remote attackers to read arbitrary files via a .. dot dot in the SearchTemplate parameter during a Title search...

snewscmsrus-xss.txt

New Advisory: Snewscms Rus v2 http://www.medprostuda.ru --------------------Summary---------------- Software: SnewsCMS Rus v. 2.3 Sowtware's Web Site: http://www.snewscms.net.ru Versions: 2.4 Critical Level: Moderate Type: XSS Class: Remote Status: Unpatched PoC/Exploit: Not Available Solution: N...

SNewsCMS 2.x - search.php Cross-Site Scripting

SNewsCMS 2.x - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/28262/info SNewsCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this...

new vuln in snewscms rus v 2.3

New Advisory: Snewscms Rus v2 http://www.medprostuda.ru --------------------Summary---------------- Software: SnewsCMS Rus v. 2.3 Sowtware's Web Site: http://www.snewscms.net.ru Versions: 2.4 Critical Level: Moderate Type: XSS Class: Remote Status: Unpatched PoC/Exploit: Not Available Solution: N...

CVE-2008-1326

Gallarific is affected by a Cross-site Scripting (XSS) vulnerability in search.php, exploitable via the query parameter to inject arbitrary web script/HTML. This is the explicit vulnerability described across multiple sources (including OpenVAS and NVD entries). The connected documents do not pro...

CVE-2008-1326

Cross-site scripting XSS vulnerability in search.php in Gallarific allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-1076

CVE-2008-1076 describes a Cross-site Scripting (XSS) vulnerability in Interspire Shopping Cart 1.x, where an attacker can inject arbitrary script via the search_query parameter in search.php. The root cause is improper handling/sanitization of the search_query input, enabling script execution in ...

Unfixed XSS vulnerability at www.24corridorstudy.ca

Security researcher CCC, has submitted on 28/02/2008 a cross-site-scripting XSS vulnerability affecting www.24corridorstudy.ca, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2008. It is currently...

Sql injection

Multiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute arbitrary SQL commands via 1 the kid parameter to a mod/dl.php or b mod/links.php, and 2 the query parameter to search.php...

CVE-2008-0811

Multiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute arbitrary SQL commands via 1 the kid parameter to a mod/dl.php or b mod/links.php, and 2 the query parameter to search.php...

auracms162-sql.txt

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 1.62 Multiple Remote SQL Injection Exploit Waktu : Feb 15 2008 01:00PM Software : AuraCMS Versi : 1.62 Vendor : http://www.auracms.org/ ------------------------------------ Audit Oleh : NTOS-Team Loka...

AuraCMS 1.62 - Multiple SQL Injections

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 1.62 Multiple Remote SQL Injection Exploit Waktu : Feb 15 2008 01:00PM Software : AuraCMS Versi : 1.62 Vendor : http://www.auracms.org/ ------------------------------------ Audit Oleh : NTOS-Team Loka...

CVE-2008-0676

Cross-site scripting XSS vulnerability in search.php in A-Blog 2 allows remote attackers to inject arbitrary web script or HTML via the words parameter...

CVE-2008-0676

Cross-site scripting XSS vulnerability in search.php in A-Blog 2 allows remote attackers to inject arbitrary web script or HTML via the words parameter...

CVE-2008-0676

CVE-2008-0676 describes a Cross-site Scripting (XSS) vulnerability in the search.php component of A-Blog 2. The flaw allows remote attackers to inject arbitrary web script or HTML via the words parameter, enabling potential credential theft or session manipulation through crafted search queries. ...