EUVD-2008-5105

Malware in sbrugna...

BoutikOne CMS 'search_query' Parameter Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/32321/info BoutikOne CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser o...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in BoutikOne CMS allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter...

CVE-2008-5126

Cross-site scripting XSS vulnerability in search.php in BoutikOne CMS allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter...

CVE-2008-5126

The CVE-2008-5126 entry concerns BoutikOne CMS, where the vulnerability is in the file search.php and is triggered via the search_query parameter. The issue is a Cross-site Scripting (XSS) vulnerability that permits remote attackers to inject arbitrary web script or HTML. The publicly provided de...

boutikone-xss.txt

BoutikOne CMS - Cross Site Scripting XSS Vulnerability http://www.boutikone.com/ XSS fOUND BY d3v1l - http://security-sh3ll.com/forum.php Bug :- searchquery=XSS Example :- http://www.un-monde-mystique.com/search.php?lang=1&sort=Ref&searchquery='"alert1337XSS...

BoutikOne CMS - search_query Cross-Site Scripting

BoutikOne CMS - searchquery Cross-Site Scripting source: https://www.securityfocus.com/bid/32321/info BoutikOne CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code i...

BoutikOne CMS - 'search_query' Cross-Site Scripting

source: https://www.securityfocus.com/bid/32321/info BoutikOne CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...