EUVD-2001-1331

Malware in sbrugna...

SUSE CVE-2001-1350

Cross-site scripting vulnerability in namazu.cgi for Namazu 2.0.7 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the lang parameter...

SUSE CVE-2004-1318

Cross-site scripting XSS vulnerability in namazu.cgi for Namazu 2.0.13 and earlier allows remote attackers to inject arbitrary HTML and web script via a query that starts with a tab "%09" character, which prevents the rest of the query from being properly sanitized...

CVE-2011-4711

Namazu is affected by CVE-2011-4711: Namazu.cgi before 2.0.16 contains directory traversal flaws that allow remote attackers to read arbitrary files via .. in the lang or result parameters. Impact is read access; no exploit details are provided in the documents. Mitigation: upgrade to Namazu 2.0....

Namazu cross-site scripting vulnerability

Overview Namazu is vulnerable to cross-site scripting due to a problem in namazu.cgi. If an illegal character is specified in a string search of namazu.cgi, the subsequent characters are not processed properly. Impact All sites that use namazu.cgi for search processing on websites are vulnerable ...

CVE-2008-1468

CVE-2008-1468 affects Namazu before 2.0.18, where namazu.cgi mishandles UTF-7 input due to charset handling, enabling cross-site scripting (XSS) by remote attackers. Public descriptions in OpenVAS/Nessus entries confirm the vulnerability class as XSS in the Namazu web interface. The base CVSS sco...

DEBIAN-CVE-2004-1318

Cross-site scripting XSS vulnerability in namazu.cgi for Namazu 2.0.13 and earlier allows remote attackers to inject arbitrary HTML and web script via a query that starts with a tab "%09" character, which prevents the rest of the query from being properly sanitized...

CVE-2004-1318

CVE-2004-1318 is an XSS vulnerability in Namazu’s namazu.cgi affecting Namazu versions up to 2.0.13. A crafted query beginning with a tab character (%09) prevents proper sanitization, allowing remote attackers to inject arbitrary HTML/JavaScript. The vulnerability appears in the query handling pa...

CVE-2001-1350

The CVE-2001-1350 entry concerns Namazu’s web component Namazu.cgi; Namazu versions up to 2.0.7 are vulnerable to cross-site scripting via the lang parameter, allowing remote attackers to run arbitrary Javascript as other web users. The connected records corroborate this XSS vector and version ra...