timberland.txt

There's a vulnerability in Timberland's search engine. The variable 'keywords' in searchHandler/index.jsp is not correctly sanitized. URL: hxxp://www.timberland.com/searchHandler/index.jsp?keywords=XSS Code Example: hxxp://www.timberland.com/searchHandler/index.jsp?keywords=alert'test'; Author: O...

Timberland Search XSS Vulnerability

There's a vulnerability in Timberland's search engine. The variable 'keywords' in searchHandler/index.jsp is not correctly sanitized. URL: hxxp://www.timberland.com/searchHandler/index.jsp?keywords=XSS Code Example:...

BlueShoes Framework <= 4.6 Remote File Include Vulnerabilities

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ BlueShoes Framework 4.6 = Remote File Include Vulnerability $$ Script site: http://www.blueshoes.org/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Find by: Kacper...

OpenCms version 6.0.x Xml Content Demo search engine Cross site scripting

Version: Tested on: - 6.0.0 - 6.0.2 - 6.0.3 Discovered by: jaime.blascoateazeldot.es http://www.eazel.es Description: Input passed to the search query in the Xml Content Demo search engine isn't properly sanitised. This can be exploited to conduct cross-site scripting attacks. Example:...

CVE-2006-1969

Cross-site scripting XSS vulnerability in search/search.cgi in an unspecified KCScripts script, probably Search Engine or Site Search, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the q parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in search/search.cgi in an unspecified KCScripts script, probably Search Engine or Site Search, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the q parameter...

Sphider configset.php settings_dir Parameter Remote File Inclusion

The remote host is running Sphider, an open source web spider and search engine written in PHP. The version of Sphider installed on the remote host fails to sanitize user-supplied input to the 'settingsdir' parameter of the 'admin/configset.php' script before using it in a PHP 'include' function...

Free Articles Directory Remote Command Exucetion

Web Site : http://www.99articles.com Script Demo Site : http://www.articlesone.com General : 1. Support rssfeed XML to distribute articles for others website and blogs. It will make grow website popularity 2. Newsletter to be growing visitors 3. Membership system for writer participants submit...

CVE-2005-4363

Cross-site scripting XSS vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters...

CVE-2005-4363: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters...

CVE-2005-4284

CVE-2005-4284 describes a cross-site scripting (XSS) vulnerability in the StaticStore Search Engine up to version 1.189A. The flaw allows remote attackers to inject arbitrary script or HTML via parameters to search.cgi, possibly the keywords parameter, leading to user script execution in the cont...

CVE-2005-4284

Cross-site scripting XSS vulnerability in StaticStore Search Engine 1.189A and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to search.cgi, possibly the keywords parameter. NOTE: this issue was originally disputed by the vendor, but it has since...

CVE-2005-4284: Undefined Security Weakness

Cross-site scripting XSS vulnerability in StaticStore Search Engine 1.189A and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to search.cgi, possibly the keywords parameter. NOTE: this issue was originally disputed by the vendor, but it has since...

StaticStore Search Engine Friendly E-Commerce XSS

StaticStore Search Engine Friendly E-Commerce XSS Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/staticstore-search-engine-friendly-e.html vendor:www.staticstore.com affected version:1.189A and prior Product Description: StaticStore is a full sto...

CVE-2005-3966

Cross-site scripting XSS vulnerability in search.jsp in Java Search Engine JSE 0.9.34 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2005-3966

CVE-2005-3966 concerns Cross-site Scripting (XSS) in Java Search Engine (JSE) 0.9.34. The vulnerability is triggered via the q parameter in search.jsp, allowing remote attackers to inject arbitrary web script or HTML. The NVD/CVE details show a MEDIUM severity (CVSS v2 base score 4.3) with networ...

CVE-2005-3966

Cross-site scripting XSS vulnerability in search.jsp in Java Search Engine JSE 0.9.34 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2005-3966: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.jsp in Java Search Engine JSE 0.9.34 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

Interspire FastFind 2005 XSS vuln.

Interspire FastFind 2005 XSS vuln. Vuln. dicovered by : r0t Date: 1 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/interspire-fastfind-2005-xss-vuln.html Vendor:http://www.interspire.com/fastfind/ affected version: 2005 and 2004 version. Product Description: Add powerful, flexible...

Java Search Engine 0.9.34 - search.jsp Cross-Site Scripting

Java Search Engine 0.9.34 - search.jsp Cross-Site Scripting source: https://www.securityfocus.com/bid/15687/info Java Search Engine is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverag...