622 matches found
ECShop V2.7.2 category.php SQL Injection Vulnerability
漏洞代码分析 /category.php .. $filterattrstr = isset$REQUEST'filterattr' ? trim$REQUEST'filterattr' : '0'; //变量 $filterattrstr 是以“.” 分开的数组 $filterattr = empty$filterattrstr ? '' : explode'.', trim$filterattrstr; .. / 扩展商品查询条件 / if !empty$filterattr $extsql = "SELECT DISTINCTb.goodsid FROM "...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in NCT Jobs Portal Script allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 Keywords, 3 Tags, or 4 Desired City field...
CVE-2010-1606
Multiple cross-site scripting XSS vulnerabilities in NCT Jobs Portal Script allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 Keywords, 3 Tags, or 4 Desired City field...
CVE-2010-1606
Multiple cross-site scripting XSS vulnerabilities in NCT Jobs Portal Script allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 Keywords, 3 Tags, or 4 Desired City field...
WordPress statspressCN 1.9.0 Stored Cross Site Scripting
Exploit Title: Wordpress statspressCN search Keywords stored XSS Date: 21-1-2010 Author: Saif El-Sherei Software Link: http://downloads.wordpress.org/plugin/statpresscn.1.9.0.zip Version: wordpress3.0.4, StatsCN1.9.0 Tested on: Firefox 3.0.15, , IE 8 Info: This plugin shows you real time statisti...
Dit.CMS <= 1.3 xss
Exploit for unknown platform in category web applications ================== Dit.CMS = 1.3 xss ================== | D R U N K E N | || || || D A N I S H | || || |' R E D N E C K S '--''--''--' RESEARCH AND FUCKING HACKING: | DRUNKEN DANISH REDNECKS | || || || !!!!!!! | || || |' email protected...
Dit.CMS 1.3 Cross Site Scripting
| D R U N K E N | || || || D A N I S H | || || |' R E D N E C K S '--''--''--' RESEARCH AND FUCKING HACKING: | DRUNKEN DANISH REDNECKS | || || || !!!!!!! | || || |' [email protected] '--''--''--' = DIT.CMS 1.3 XSS | | "ENTER KEYWORDS" FORM FIELD IN DAMNED FRONT PAGE @ DITCMS.ORG /...
SLES9: Security update for PHP4
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: php4-imap php4-readline php4-iconv php4-servlet apache2-modphp4 php4-gd php4-sysvshm php4-pear php4-xslt php4-zlib php4-mcal php4-yp php4-wddx modphp4...
CVE-2009-3337
SQL injection vulnerability in the Freetag serendipityeventfreetag plugin before 3.09 for Serendipity S9Y allows remote attackers to execute arbitrary SQL commands via an unspecified parameter associated with Meta keywords in a blog entry...
Sql injection
SQL injection vulnerability in the Freetag serendipityeventfreetag plugin before 3.09 for Serendipity S9Y allows remote attackers to execute arbitrary SQL commands via an unspecified parameter associated with Meta keywords in a blog entry...
CVE-2009-3337
SQL injection vulnerability in the Freetag serendipityeventfreetag plugin before 3.09 for Serendipity S9Y allows remote attackers to execute arbitrary SQL commands via an unspecified parameter associated with Meta keywords in a blog entry...
AccessoriesMe PHP Affiliate Script 1.4 - Blind SQL Injection / Cross-Site Scripting
/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || AccessoriesMe PHP Affiliate Script v1.4 bSQL-XSS Multiple Remote Vulnerabilities Discovered By : Moudi Contact : Download :...
Sql injection
SQL injection vulnerability in the News Page module 5.x before 5.x-1.2 for Drupal allows remote authenticated users, with News Page nodes create and edit privileges, to execute arbitrary SQL commands via the Include Words aka keywords field...
SA-CONTRIB-2009-023 - News Page - SQL injection
The News Page module provides a node content type which displays feed items from an aggregator category, filtered by keywords entered into the 'Include Words' field of the node. Unfortunately the News Page module uses keywords directly in SQL queries without being sanitized, allowing SQL injectio...
CVE-2009-1321
Cross-site scripting XSS vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...
CVE-2009-1321
Cross-site scripting XSS vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...
ASP Product Catalog 1.0 (XSS/DD) Multiple Remote Exploits
Exploit for unknown platform in category web applications ========================================================= ASP Product Catalog 1.0 XSS/DD Multiple Remote Exploits ========================================================= !/usr/bin/perl By AlpHaNiX NullArea.Net Made in Tunisia script : AS...
CVE-2008-6654
Cross-site scripting XSS vulnerability in searchresults.php in InfoBiz Server allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in Turnkey Ebook Store 1.1 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search action...