MyBB 1.6.12 POST Cross Site Scripting

alert/XSS/ " / document.exploit.submit;...

CTSCMS 4.0 search.php SQL注入漏洞

在/plus/search.php文件，外界传入数组的key未经过安全过滤直接赋值给变量$typeid，并且在创建对象时将变量$typeid做为参数传递给了SearchView类的构造函数，将传进来的变量$typeid直接放入SQL查询语句中执行，导致了SQL注入漏洞的产生。 0 CTSCMS 4.0 将$typeid变量进行过滤!...

RedAxScript 1.1 SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Sql injection

Multiple SQL injection vulnerabilities in MYRE Realty Manager allow remote attackers to execute arbitrary SQL commands via the bathrooms1 parameter to 1 demo2/search.php or 2 search.php...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in MYRE Business Directory allows remote attackers to inject arbitrary web script or HTML via the look parameter...

JBS V2.0 (search.php) - SQL Injection Vulnerability

Exploit for php platform in category web applications JBS V2.0 search.php - SQL Injection Vulnerability ==================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : email protected , email protected .:. Home : http://www.iphobos.com/blog/ .:...

KingCms 6.1.1641 search.php SQL注入漏洞

No description provided by source...

ecshop 2.7.2 search.php SQL注入漏洞

No description provided by source...

CTSCMS 4.0 /plus/search.php SQL注入漏洞

No description provided by source...

MantisBT search.php match_type Parameter XSS

The version of MantisBT installed on the remote host fails to properly sanitize user-supplied input to the 'matchtype' parameter of the 'search.php' script before using it to generate dynamic HTML output. An attacker may be able to leverage this to inject arbitrary HTML and script code into a...

DedeCms V57 plus/search. php file to SQL injection-vulnerability warning-the black bar safety net

Twitter on seen on the analysis,this exploit is more than one place can be utilized. Can actually disregard magicquotesgpc = On. Really not tasteless. Author: [email protected] Dedecms latest version plus/search.php file there is a variable override vulnerability,successfully exploited this...

CVE-2012-5874

Multiple SQL injection vulnerabilities in the 1 updatewhosonlinereg and 2 updatewhosonlineguest functions in Elite Bulletin Board before 2.1.22 allow remote attackers to execute arbitrary SQL commands via the PATHINFO to a checkuser.php, b groups.php, c index.php, d login.php, e quicklogin.php, f...

Sino Solutions Cross Site Scripting

---------------------------------------------------------------- Sino solutions search.php Cross Site Scripting Vulnerabilities ---------------------------------------------------------------- Exploit Title : Sino solutions search.php Cross Site Scripting Vulnerabilities Author : Hack Center...

Sql injection

SQL injection vulnerability in search.php in Banana Dance, possibly B.1.5 and earlier, allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2011-5176

Banana Dance’s search.php contains multiple XSS vulnerabilities exploitable via the q and category parameters. Affected: versions prior to B.1.5. Root cause: insufficient input sanitization in search.php. Impact: remote injection of arbitrary script/HTML. Remediation: upgrade to B.1.5 or newer; a...

PT-2012-2153 · Unknown · Banana Dance

Name of the Vulnerable Software and Affected Versions: Banana Dance versions prior to B.1.5 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the q or category parameters in th...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Etano 1.22 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user, 2 email, 3 email2, 4 f17zip, or 5 agree parameter to join.php; 6 PATHINFO, 7 st, 8 f17city, 9 f17country, 10 f17state, 11 f17zip, 12 f19, 13...

ArticleSetup 1.1 SQL Injection

HTTPCS Advisory : HTTPCS86 Product : ArticleSetup Version : 1.1 Date : 2012-09-03 Criticality level : Highly Critical Description : A vulnerability has been discovered in ArticleSetup, which can be exploited by malicious people to conduct SQL injection attacks. Input passed via the 'cat' paramete...

ShareLive CMS Cross Site Scripting

Exploit Title: ShareLive cms Cross Site Scripting Vulnerability Google Dork: intext:"Code and Portal design © ShareLive" Date: 08/24/2012 Author: Crim3R Tested on: all ======================================== s parametr in search.php is Vulnerable to xss D3M0 :...

Sql injection

Multiple SQL injection vulnerabilities in MyBB aka MyBulletinBoard before 1.6.1 allow remote attackers to execute arbitrary SQL commands via the keywords parameter in a 1 dosearch action to search.php or 2 dostuff action to private.php. NOTE: the vendor disputes this issue, saying "Although this...