CVE-2017-17603

Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, projtype, searchtext, sellprice, or maxprice parameter...

Sql injection

Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, projtype, searchtext, sellprice, or maxprice parameter...

CVE-2017-17603: Improper Neutralization of Special Elements used in an SQL Command

Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, projtype, searchtext, sellprice, or maxprice parameter...

Joomla! Component BookLibrary 3.6.1 - SQL Injection

Exploit Title: Joomla! Component BookLibrary v3.6.1 - SQL Injection Google Dork: inurl:index.php?option=combooklibrary Date: 22.02.2017 Vendor Homepage: http://ordasoft.com/ Software Buy: https://extensions.joomla.org/extensions/extension/living/education-a-culture/booklibrary-basic/ Demo:...

igup.urfu.ru XSS vulnerability

Vulnerable URL: http://igup.urfu.ru/index.php/article/search/?SearchText=testprompt/OPENBUGBOUNTY/...

cuzk.cz XSS vulnerability

Vulnerable URL: http://cuzk.cz/Nastaveni-webu/Vysledky-vyhledavani.aspx?searchtext=%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3C/script%3E=anyword Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

CVE-2011-1510

Cross-site scripting XSS vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus SDP before 8012 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus SDP before 8012 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter...

CVE-2011-1510

Cross-site scripting XSS vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus SDP before 8012 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter...

CVE-2011-1510: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus SDP before 8012 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter...

CVE-2010-2986: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in webacs/QuickSearchAction.do in the search feature in the web interface in Cisco Wireless Control System WCS before 6.0194.0 and 7.x before 7.0.164 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter, aka Bug ID...

CVE-2010-1522: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the BookLibrary Basic combooklibrary component 1.5.3 before 1.5.320100620 for Joomla! allow remote attackers to execute arbitrary SQL commands via the bid parameter in a 1 lendrequest or 2 savelendrequest action to index.php, the id parameter in a 3...

CVE-2009-4387: Improper Neutralization of Input During Web Page Generation

The cross-site scripting XSS protection mechanism in ShowInContentAreaAction.do in ManageEngine Password Manager Pro PMP before 6.1 Build 6104 uses case-sensitive checks for malicious inputs, which allows remote attackers to inject arbitrary web script or HTML via the searchtext parameter and oth...

Cross site scripting

Cross-site scripting XSS vulnerability in Widgets.aspx in Blogsa 1.0 Beta 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchText parameter...

CVE-2009-0814

Cross-site scripting XSS vulnerability in Widgets.aspx in Blogsa 1.0 Beta 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchText parameter...

CVE-2009-0814: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Widgets.aspx in Blogsa 1.0 Beta 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchText parameter...

CVE-2008-5068: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Kmita Gallery allow remote attackers to inject arbitrary web script or HTML via the 1 begin parameter to index.php and the 2 searchtext parameter to search.php. NOTE: the provenance of this information is unknown; the details are obtained solel...

CVE-2008-1795: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0 versions, allow remote attackers to inject arbitrary web script or HTML via 1 the searchText parameter in a Course action to webapps/blackboard/execute/viewCatalog or 2 the...

CVE-2008-1538

Cross-site scripting XSS vulnerability in searchAction.do in ManageEngine EventLog Analyzer 5 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-1538

The CVE-2008-1538 entry describes a Cross-site scripting (XSS) vulnerability in ManageEngine EventLog Analyzer 5, exploitable through the searchAction.do endpoint via the searchText parameter. The root cause is inadequate sanitization/validation of user-supplied searchText, allowing remote attack...