Lucene search
+L

452 matches found

NVD
NVD
•added 2010/03/23 6:30 p.m.•23 views

CVE-2010-1072

Cross-site scripting XSS vulnerability in search.php in Sniggabo CMS 2.21 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

4.3CVSS5.7AI score0.01108EPSS
SaveExploits1References5
NVD
NVD
•added 2010/03/23 6:30 p.m.•21 views

CVE-2009-4736

Cross-site scripting XSS vulnerability in search.php in CommonSense CMS 5.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

4.3CVSS5.7AI score0.01299EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/03/23 12:00 a.m.•7 views

CVE-2010-1072: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in Sniggabo CMS 2.21 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

4.3CVSS6AI score0.01108EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/03/23 12:00 a.m.•6 views

CVE-2009-4736: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in CommonSense CMS 5.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

4.3CVSS6AI score0.01299EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/02/23 12:00 a.m.•5 views

CVE-2010-0699: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in VideoSearchScript Pro 3.5 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

4.3CVSS6AI score0.0091EPSS
SaveExploits1References2
zdt
zdt
•added 2009/10/14 12:00 a.m.•31 views

AdaptBB <= 1.0 xss

Exploit for unknown platform in category web applications ================== AdaptBB = 1.0 xss ================== | D R U N K E N | || || || D A N I S H | || || |' R E D N E C K S '--''--''--' RESEARCH AND FUCKING HACKING: | DRUNKEN DANISH REDNECKS | || || || !!!!!!! | || || |' '--''--''--' =...

7.1AI score
SaveExploits0
Cvelist
Cvelist
•added 2009/08/24 7:00 p.m.•36 views

CVE-2008-7059

SQL injection vulnerability in index.php in One-News Beta 2 allows remote attackers to execute arbitrary SQL commands via the q parameter...

8.4AI score0.00969EPSS
SaveExploits3References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/08/24 12:00 a.m.•8 views

CVE-2008-7059: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in One-News Beta 2 allows remote attackers to execute arbitrary SQL commands via the q parameter...

7.5CVSS6.4AI score0.00969EPSS
SaveExploits3References2
Cvelist
Cvelist
•added 2009/08/21 8:21 p.m.•39 views

CVE-2009-2930

Cross-site scripting XSS vulnerability in the Search feature in elka CMS aka Elkapax allows remote attackers to inject arbitrary web script or HTML via the q parameter to the default URI...

5.7AI score0.01204EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/08/21 12:00 a.m.•6 views

CVE-2009-2930: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Search feature in elka CMS aka Elkapax allows remote attackers to inject arbitrary web script or HTML via the q parameter to the default URI...

4.3CVSS5.9AI score0.01204EPSS
SaveExploits1References2
NVD
NVD
•added 2009/07/30 7:30 p.m.•41 views

CVE-2008-6879

Cross-site scripting XSS vulnerability in Apache Roller 2.3, 3.0, 3.1, and 4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action...

4.3CVSS5.6AI score0.04989EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/07/30 12:00 a.m.•6 views

CVE-2008-6879: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Apache Roller 2.3, 3.0, 3.1, and 4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action...

4.3CVSS5.9AI score0.04989EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/07/24 12:00 a.m.•8 views

CVE-2009-2595: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in productSearch.html in Censura 2.0.4 and 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a ProductSearch action...

4.3CVSS5.9AI score0.0173EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/07/22 12:00 a.m.•7 views

CVE-2009-2571: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in VerliAdmin 0.3.7 and 0.3.8 allow remote attackers to inject arbitrary web script or HTML via 1 the URI, 2 the q parameter, 3 the nick parameter, or 4 the nick parameter in a bantest action...

4.3CVSS5.8AI score0.01484EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/07/02 12:00 a.m.•9 views

CVE-2009-2302: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action. NOTE: it was later reported that 5.2.1 is also affected...

4.3CVSS5.9AI score0.01734EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/07/01 12:00 a.m.•10 views

CVE-2009-2289: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Arcade Trade Script 1.0 beta allows remote attackers to inject arbitrary web script or HTML via the q parameter in a gamelist action...

4.3CVSS5.9AI score0.01449EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/03/16 12:00 a.m.•5 views

CVE-2008-6476: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in blog/search.aspx in BlogEngine.NET allows remote attackers to inject arbitrary web script or HTML via the q parameter...

4.3CVSS5.9AI score0.01465EPSS
SaveExploits2References2
NVD
NVD
•added 2009/01/21 8:30 p.m.•35 views

CVE-2009-0026

Multiple cross-site scripting XSS vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to 1 search.jsp or 2 swr.jsp...

4.3CVSS5.7AI score0.26778EPSS
SaveExploits4References8
Mend
Mend
•added 2009/01/21 8:00 p.m.•3 views

CVE-2009-0026

Multiple cross-site scripting XSS vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to 1 search.jsp or 2 swr.jsp...

6.3CVSS0.26778EPSS
SaveExploits4References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/01/21 12:00 a.m.•6 views

CVE-2009-0026: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to 1 search.jsp or 2 swr.jsp...

4.3CVSS5.9AI score0.26778EPSS
SaveExploits4References2
Rows per page
Query Builder