EUVD-2005-4019

Malware in sbrugna...

Interspire FastFind Index.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20380/info Interspire FastFind is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in t...

FastFind 2005.0.3 Cross Site Scripting

======================================================================================== | Title : FastFind Version 2005.0.3 Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total...

FastFind v2005.0.3 XSS Vulnerability

No description provided by source. ======================================================================================== | Title : FastFind Version 2005.0.3 Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi -...

fastfind.txt

XSS IN FastFind... DORK: "Powered by FastFind - Search Engine Script" Exploit: http://target/path/index.php?query=alert1&type=simple references: http://www.interspire.com/fastfind/ Example: http://www.target.com/fastfind/index.php?query=%3Cscript%3Ealert%281%29%3C%2Fscript%3E&type=simple...

Interspire FastFind - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20380/info Interspire FastFind is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user...

CVE-2005-4024

Cross-site scripting XSS vulnerability in Interspire FastFind 2004 and 2005 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2005-4024

Cross-site scripting XSS vulnerability in Interspire FastFind 2004 and 2005 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2005-4024

Interspire FastFind 2004 and 2005 are affected by a Cross-site Scripting (XSS) vulnerability exploitable via the query parameter, enabling remote script/HTML injection. CVSS v2.0 base score 4.3 (low-medium) with user interaction not required and partial integrity impact. The CVE entry cites the a...

Interspire FastFind 2005 XSS vuln.

Interspire FastFind 2005 XSS vuln. Vuln. dicovered by : r0t Date: 1 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/interspire-fastfind-2005-xss-vuln.html Vendor:http://www.interspire.com/fastfind/ affected version: 2005 and 2004 version. Product Description: Add powerful, flexible...