EUVD-2001-1331

Malware in sbrugna...

SUSE CVE-2001-1350

Cross-site scripting vulnerability in namazu.cgi for Namazu 2.0.7 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the lang parameter...

SUSE CVE-2004-1318

Cross-site scripting XSS vulnerability in namazu.cgi for Namazu 2.0.13 and earlier allows remote attackers to inject arbitrary HTML and web script via a query that starts with a tab "%09" character, which prevents the rest of the query from being properly sanitized...

CVE-2011-4711

Namazu is affected by CVE-2011-4711: Namazu.cgi before 2.0.16 contains directory traversal flaws that allow remote attackers to read arbitrary files via .. in the lang or result parameters. Impact is read access; no exploit details are provided in the documents. Mitigation: upgrade to Namazu 2.0....

CVE-2011-4711: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in namazu.cgi in Namazu before 2.0.16 allow remote attackers to read arbitrary files via a .. dot dot in the 1 lang or 2 result parameter...

PT-2011-5046

Name of the Vulnerable Software and Affected Versions Namazu versions prior to 2.0.16 Description The issue allows remote attackers to read arbitrary files due to multiple directory traversal vulnerabilities in namazu.cgi. This is achieved by using a .. dot dot in the lang or result parameter...

Namazu cross-site scripting vulnerability

Overview Namazu is vulnerable to cross-site scripting due to a problem in namazu.cgi. If an illegal character is specified in a string search of namazu.cgi, the subsequent characters are not processed properly. Impact All sites that use namazu.cgi for search processing on websites are vulnerable ...

CVE-2008-1468

CVE-2008-1468 affects Namazu before 2.0.18, where namazu.cgi mishandles UTF-7 input due to charset handling, enabling cross-site scripting (XSS) by remote attackers. Public descriptions in OpenVAS/Nessus entries confirm the vulnerability class as XSS in the Namazu web interface. The base CVSS sco...

CVE-2008-1468: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in namazu.cgi in Namazu before 2.0.18 allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded input, related to failure to set the charset, a different vector than CVE-2004-1318 and CVE-2001-1350. NOTE: some of these details are...

DEBIAN-CVE-2004-1318

Cross-site scripting XSS vulnerability in namazu.cgi for Namazu 2.0.13 and earlier allows remote attackers to inject arbitrary HTML and web script via a query that starts with a tab "%09" character, which prevents the rest of the query from being properly sanitized...

CVE-2004-1318

CVE-2004-1318 is an XSS vulnerability in Namazu’s namazu.cgi affecting Namazu versions up to 2.0.13. A crafted query beginning with a tab character (%09) prevents proper sanitization, allowing remote attackers to inject arbitrary HTML/JavaScript. The vulnerability appears in the query handling pa...

CVE-2004-1318: Undefined Security Weakness

Cross-site scripting XSS vulnerability in namazu.cgi for Namazu 2.0.13 and earlier allows remote attackers to inject arbitrary HTML and web script via a query that starts with a tab "%09" character, which prevents the rest of the query from being properly sanitized...

CVE-2001-1350

The CVE-2001-1350 entry concerns Namazu’s web component Namazu.cgi; Namazu versions up to 2.0.7 are vulnerable to cross-site scripting via the lang parameter, allowing remote attackers to run arbitrary Javascript as other web users. The connected records corroborate this XSS vector and version ra...

CVE-2001-1350: Undefined Security Weakness

Cross-site scripting vulnerability in namazu.cgi for Namazu 2.0.7 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the lang parameter...