CVE-2013-10051: Improper Neutralization of Directives in Dynamically Evaluated Code

A remote PHP code execution vulnerability exists in InstantCMS version 1.6 and earlier due to unsafe use of eval within the search view handler. Specifically, user-supplied input passed via the look parameter is concatenated into a PHP expression and executed without proper sanitation. A remote...

PT-2013-2043

Name of the Vulnerable Software and Affected Versions MYRE Business Directory affected versions not specified Description A cross-site scripting XSS issue exists in the search.php file, allowing remote attackers to inject arbitrary web script or HTML via the look parameter in the API endpoint...

CVE-2012-6589: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in MYRE Business Directory allows remote attackers to inject arbitrary web script or HTML via the look parameter...