25 matches found
CVE-2017-14738
CVE-2017-14738 affects FileRun (versions 2017.09.18 and earlier) via a remote SQL injection caused by improper sanitization of the metafield parameter in the metasearch module’s search function. The vulnerability can allow an attacker to inject SQL commands through the affected input. Connected d...
CVE-2017-14738
FileRun version 2017.09.18 and below suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module under the search function...
metasearch.com XSS vulnerability
Vulnerable URL: http://metasearch.com/www.cgi?p=OPENBUGBOUNTY%3Cimg%20src=x%20onerror=alert%28/OPENBUGBOUNTY/%29%3E=20=o Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1163572 VIP...
CVE-2006-6823
PHP remote file inclusion vulnerability in plugins/metasearch/plug.inc.php in Yrch! 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...
Yrch 1.0 (plug.inc.php path variable) Remote File Include Exploit
No description provided by source. !/usr/bin/perl Yrch! v1.0 Hierarchised Website Directories plug.inc.phpRemote File Include Vulnerability Bug Found : DeltahackingTEAM discovery:Dr.Pantagon & Exploitet By Dr.Trojan contact Dr.TrojanaDeltaSecurity.ir Class: Remote File Include Vulnerability...