PT-2011-1997

Name of the Vulnerable Software and Affected Versions MH Products kleinanzeigenmarkt affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the c parameter in the "search.php" file. Recommendations At the moment, there...

MyChurchWebsite Cross Site Scripting

Exploit Title: MyChurchWebsite XSS Date: 04.11.2011 - 17.55 Author: Mr.PaPaRoSSe Tested On: BackTrack 5 - Win7 Platform: Php ------------------------------------------------------------- alertdocument.cookie search.php?pageID=search&search=XSS...

Jara 1.6 - Multiple Vulnerabilities

Jara 1.6 - Multiple Vulnerabilities !/Mohammed/bin/YahYa Jara v1.6 Multiple Vulnerabilities -------------------------------------------+ download : http://sourceforge.net/projects/jara/files/v1.6/jarav16.zip AutHOr : Or4nG.M4n cOntAct : priv8teathotmail.com versiOn : v1.6 Tested : My Mind :...

Jara 1.6 - Multiple Vulnerabilities

!/Mohammed/bin/YahYa Jara v1.6 Multiple Vulnerabilities -------------------------------------------+ download : http://sourceforge.net/projects/jara/files/v1.6/jarav16.zip AutHOr : Or4nG.M4n cOntAct : priv8teathotmail.com versiOn : v1.6 Tested : My Mind :...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in iScripts eSwap 2.0 allows remote attackers to inject arbitrary web script or HTML via the txtHomeSearch parameter aka the search field. NOTE: some of these details are obtained from third party information...

CVE-2010-5035

CVE-2010-5035 is an XSS vulnerability in iScripts eSwap 2.0, affecting the search.php script via the txtHomeSearch parameter. The underlying issue is a failure to properly sanitize input, enabling remote attackers to inject arbitrary script/HTML through the search field. The NVD entry lists a CVS...

CVE-2010-5035: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in iScripts eSwap 2.0 allows remote attackers to inject arbitrary web script or HTML via the txtHomeSearch parameter aka the search field. NOTE: some of these details are obtained from third party information...

PT-2011-1970

Name of the Vulnerable Software and Affected Versions iScripts eSwap version 2.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the txtHomeSearch parameter in the "search.php" file, which is also referred...

Cross site scripting

Cross-site scripting XSS vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter aka Search Box field. NOTE: some of these details are obtained from third party information...

CVE-2010-4976: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter aka Search Box field. NOTE: some of these details are obtained from third party information...

PT-2011-1911

Name of the Vulnerable Software and Affected Versions MetInfo version 3.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the searchword parameter in the "search/search.php" file, also known as the Search...

Jara 1.6 Cross Site Scripting

Exploit Title: jara 1.6 XSS Vulnerabilities Date: 2011.10.25 Author: Expl0its We Are : Expl0its , Highersense , Black.spook & H4ckcity.net - zone-hc.com Software Link: http://sourceforge.net/projects/jara/files/v1.6/jarav16.zip Version: jara 1.6 Vulnerable Page: search.php?term&term= Exploit:...

Yet Another CMS 1.0 - SQL Injection / Cross-Site Scripting

Advisory: Yet Another CMS 1.0 SQL Injection & XSS vulnerabilities Advisory ID: SSCHADV2011-031 Author: Stefan Schurtz Affected Software: Successfully tested on Yet Another CMS 1.0 Vendor URL: http://yetanothercms.codeplex.com/ Vendor Status: informed ========================== Vulnerability...

CVE-2010-4932

Cross-site scripting XSS vulnerability in search.php in Entrans before 0.3.3 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in Entrans before 0.3.3 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2010-4932

Cross-site scripting XSS vulnerability in search.php in Entrans before 0.3.3 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2010-4932

CVE-2010-4932 describes a reflected XSS in Entrans prior to 0.3.3, affecting the file search.php via the query parameter. The root cause is insufficient input sanitization, allowing remote attackers to inject arbitrary HTML/JavaScript executed in the victim’s browser. The linked advisories provid...

CVE-2010-4932: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in Entrans before 0.3.3 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

PT-2011-1867

Name of the Vulnerable Software and Affected Versions Entrans versions prior to 0.3.3 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the query parameter in the "search.php" endpoint. Recommendations For...

CVE-2010-4909

Multiple cross-site scripting XSS vulnerabilities in PaysiteReviewCMS 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 q parameter to search.php or the 2 image parameter to image.php...