YaCy Peer-To-Peer Search Engine XSS

The remote host contains a peer-to-peer search engine that is prone to cross-site scripting attacks. Description : The remote host runs YaCy, a peer-to-peer distributed web search engine and caching web proxy. The remote version of this software is vulnerable to multiple cross-site scripting due ...

yacyXSS.txt

Donato Ferrante Application: yacy http://www.yacy.net Version: 0.31 Bug: cross site scripting Date: 24-Dec-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2. The bug 3...

CVE-2004-2651

Multiple cross-site scripting XSS vulnerabilities in YaCy before 0.32 allow remote attackers to inject arbitrary web script or HTML via the 1 urlmaskfilter parameter to index.html or the 2 page parameter to Wiki.html...

YaCy Peer-To-Peer Search Engine XSS

The remote host runs YaCy, a peer-to-peer distributed web search engine and caching web proxy. The remote version of this software is vulnerable to multiple cross-site scripting due to a lack of sanitization of user-supplied data. Successful exploitation of this issue may allow an attacker to use...

YACY crossite scripting

Crossite scripting with diagnostic messages...

XSS in yacy 0.31

Donato Ferrante Application: yacy http://www.yacy.net Version: 0.31 Bug: cross site scripting Date: 24-Dec-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2. The bug 3...