Turbo Seek 1.7.2 Files Reading Vulnerability - Active Check

The remote host is running Turbo Seek. Turbo Seek is a search engine and directory tool. The remote version of this software contains a file content disclosure flaw which may allow a malicious user to read arbitrary files on the remote server with the privileges the remote web server is running...

Baidu VS Google-who is more powerful-bug warning-the black bar safety net

Remember once used Baidu to find the asp back door in the process! google, well known, famous world-class web search engine, and today, they worship in our domestic Baidu's feet, what it??? Don't believe that?? Don't believe it tell I see it! This was thanks to the cat the cat provides much...

gforgeXSS.txt

--------------------------------------------------------------------------- Various Vulnerabilities in GForge --------------------------------------------------------------------------- Author: Jose Antonio Coret Joxean Koret Date: 2005 Location: Basque Country...

Cross Site Scripting vulnerabilities in GForge

--------------------------------------------------------------------------- Various Vulnerabilities in GForge --------------------------------------------------------------------------- Author: Jose Antonio Coret Joxean Koret Date: 2005 Location: Basque Country...

flsearch.pl.txt

Chroot Security Group Advisory 2005-07-25 Remote arbitrary code execution in FtpLocate 2.02 current Summary: FtpLocate is a ftp search engine supporting filename and description search. A remote attack can run arbitary commands with the web server's privileges by exploiting a unfiltered parameter...

osTicketSQL.txt

GulfTech Security Research May 2nd, 2005 Vendor : osTicket URL : http://www.osticket.com/ Version : All Versions Risk : Multiple Vulnerabilities Description: osTicket is a widely-used open source support ticket system. It is a lightweight support ticket tool written mainly using PHP scripting...

CVE-2005-0932

Multiple SQL injection vulnerabilities in phpCOIN 1.2.1b and earlier allow remote attackers to execute arbitrary SQL commands 1 via the search engine, 2 the username or email fields in the "forgotten password" feature, or 3 the domain name in a package order...

[Full-disclosure] Firesearching 1 + 2 [Firefox 1.0.2]

Notice I really wonder why the Mozilla Foundation decided to release a serious security update on a friday night and to disclose the link to my proof-of-concept code so quickly. It wasn't intendet from my side to release this as a 0day exploit. Please complain to [email protected] if you...

CVE-2005-0932

Multiple SQL injection vulnerabilities in phpCOIN 1.2.1b and earlier allow remote attackers to execute arbitrary SQL commands 1 via the search engine, 2 the username or email fields in the "forgotten password" feature, or 3 the domain name in a package order...

PhpIncludeWorm.txt

!/usr/bin/perl use LWP::Simple; use IO::Socket::INET; while1 $numr = int rand9999; $caxe = "."; $caxe1 = "."; $caxe .= rand9999; $caxe1 .= rand9999; $arq = "."; $arq = int rand9999; opensites,"$arq"; print sites ""; closesites; $procura = 'inurl:.php?=' . $numr; for$n=0;$nnewPeerAddr =...

YaCy Peer-To-Peer Search Engine XSS

The remote host runs YaCy, a peer-to-peer distributed web search engine and caching web proxy. The remote version of this software is vulnerable to multiple cross-site scripting due to a lack of sanitization of user-supplied data. Successful exploitation of this issue may allow an attacker to use...

adv17.txt

+| Advisory 17. Search Engine & Directory by Turbo Seek Software: Search Engine & Directory Powered by Turbo Seek Vendor: FocalMedia.Net http://www.focalmedia.net Vulnerability: âîçìîæíîñòü ÷òåíèÿ ôàéëîâ Risk: ñðåäíèé Date: 10'Sept 2004 discovered by durito -duritoatmaildotru- HTTP: www.lwb57.org...

Buffer overflow in mnoGoSearch

Product : mnoGoSearch Date : 02/15/2004 Author : Frank Denis [email protected] ------------------------ Product description ------------------------ From the web site : mnoGoSearch formerly known as UdmSearch is a full-featured web search engine software for intranet and internet servers. mnoGoSearc...

CVE-2003-1498

Cross-site scripting XSS vulnerability in search.php for WRENSOFT Zoom Search Engine 2.0 Build 1018 and earlier allows remote attackers to inject arbitrary web script or HTML via the zoomquery parameter...

WrenSoft Zoom Search Engine 2.0 Build: 1018 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/8823/info WrenSoft Zoom Search Engine is prone to a cross-site scripting issue in the software's search module. A remote attacker may be able to execute HTML or script code in a user's browser. The problem occurs because the software fails to properly...

Gallery 1.21.3.x - Search Engine Cross-Site Scripting

Gallery 1.21.3.x - Search Engine Cross-Site Scripting source: https://www.securityfocus.com/bid/8288/info Gallery is prone to a cross-site scripting vulnerability. This issue is present in the search engine facility provided by the software. An attacker could exploit this issue by constructing a...

Gallery 1.2/1.3.x - Search Engine Cross-Site Scripting

source: https://www.securityfocus.com/bid/8288/info Gallery is prone to a cross-site scripting vulnerability. This issue is present in the search engine facility provided by the software. An attacker could exploit this issue by constructing a malicious link to the search engine that contains...

PHPNuke SQL Injection

PHPNuke SQL Injection 2-18-2003 http://CGIshield.com How to steal the password hash of the Admin user on PHPnuke 6.0 & 5.6 windows+linux method 1 PHPnuke, a widely used open-source web portal system, has been found to contain a remotely exploitable SQL injection bug, which allows stealing of the...

CVE-2002-1036

Cross-site scripting vulnerability in search.pl for Fluid Dynamics Search Engine FDSE before 2.0.0.0055 allows remote attackers to execute web script via the 1 Rank or 2 Match parameters...

Super Site Searcher - Remote Command Execution

source: https://www.securityfocus.com/bid/5605/info Super Site Searcher is prone to remote command execution. Shell metacharacters are not adequately filtered from query string parameters in a request to the vulnerable search engine script. The parameters are then used in a function which passes...