3 matches found
AllWeb Search 3.0 - SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15587/info AllWeb Search is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation coul...
CVE-2005-3865
SQL injection vulnerability in index.php in AllWeb search 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the search parameter...
CVE-2005-3865
CVE-2005-3865 describes a SQL injection vulnerability in the web app component: AllWeb search 3.0 and earlier. The flaw is in the index.php file, where the vulnerable point is the search parameter, allowing remote attackers to execute arbitrary SQL commands. The available documents identify the a...