CVE-2023-26443: Improper Neutralization of Special Elements used in an SQL Command

Full-text autocomplete search allows user-provided SQL syntax to be injected to SQL statements. With existing sanitization in place, this can be abused to trigger benign SQL Exceptions but could potentially be escalated to a malicious SQL injection vulnerability. We now properly encode single...

SUSE CVE-2014-6564

Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB FULLTEXT SEARCH DML...

phpBB Denial of Service

The fulltext search component in phpBB before 3.2.6 allows Denial of Service...

GHSA-6PGR-X867-H7JX phpBB Denial of Service

The fulltext search component in phpBB before 3.2.6 allows Denial of Service...

phpBB 3.2.5 Denial Of Service Vulnerability

Vulnerability information ========================= Title: phpBB Native Fulltext Search denial of service CVE ID: CVE-2019-9826 CVSSv3 score: 8.6 AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H Vulnerability description ========================= Improper input validation in the Native Fulltext Search compone...

Denial of service

The fulltext search component in phpBB before 3.2.6 allows Denial of Service...

CVE-2019-9826

The fulltext search component in phpBB before 3.2.6 allows Denial of Service...

CVE-2019-9826

The fulltext search component in phpBB before 3.2.6 allows Denial of Service...

CVE-2019-9826

The fulltext search component in phpBB before 3.2.6 allows Denial of Service...

UBUNTU-CVE-2019-9826

The fulltext search component in phpBB before 3.2.6 allows Denial of Service...

CVE-2019-9826

The fulltext search component in phpBB before 3.2.6 allows Denial of Service...

CVE-2019-9826

The fulltext search component in phpBB before 3.2.6 allows Denial of Service...

CVE-2019-9826: Improper Input Validation

The fulltext search component in phpBB before 3.2.6 allows Denial of Service...

PT-2019-19878

Name of the Vulnerable Software and Affected Versions phpBB versions prior to 3.2.6 Description The issue affects the fulltext search component, allowing for a Denial of Service. No information is provided about the estimated number of potentially affected devices worldwide or real-world incident...

pubfacts.com XSS vulnerability

Open Bug Bounty ID: OBB-512285 Description| Value ---|--- Affected Website:| pubfacts.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based ...

CVE-2017-15044

The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by...

Design/Logic Flaw

The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by...

CVE-2017-15044

The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by...

CVE-2017-15044

The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by...

CVE-2017-15044

The CVE-2017-15044 issue concerns DocuWare Fulltext Search server (up to version 6.11). The embedded Solr service is reachable from the network due to the server listening on a network interface (not localhost), allowing remote users to connect, download searchable text, and potentially bypass Do...