sibtourport.ru XSS vulnerability

Vulnerable URL: http://www.sibtourport.ru/search/node/--...

popsugar.co.uk XSS vulnerability

Vulnerable URL: http://www.popsugar.co.uk/search?s=x"...

morningjournal.com XSS vulnerability

Open Bug Bounty ID: OBB-82595 Description| Value ---|--- Affected Website:| morningjournal.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

marokko.nl XSS vulnerability

Vulnerable URL: http://marokko.nl/geentaboes/zoeken.php?q=" Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 14:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 89686 Google Pagerank| 4 VIP website status:| N...

kb.enoi.se XSS vulnerability

Vulnerable URL: http://kb.enoi.se/?s=...

timbuk2.com XSS vulnerability

Vulnerable URL: http://www.timbuk2.com/search?cgid=root...

bdlive.co.za XSS vulnerability

Vulnerable URL: http://www.bdlive.co.za/search/asd"...

NewStatPress <= 1.0.4 - SQL Injection

The Search functionality is susceptible to a SQL Injection attack due to usage of user input without sanitation. In particular, at line 98 of 'includes/nspsearch.php'. Utilising a specially crafted SQL query, we can trigger disclosure of user hashes through an IMG tag as the data channel. PoC The...

Unspecified Vulnerability in Oracle PeopleSoft Product PeopleSoft Enterprise PeopleTools Component

Oracle PeopleSoft is a suite of enterprise human capital management solutions.PeopleSoft Enterprise PeopleTools is a tool and technology platform component that transforms the way organizations manage, use, and maintain PeopleSoft software. An unspecified security vulnerability exists in the PIA...

CVE-2015-0496

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authenticated users to affect confidentiality via vectors related to PIA Search Functionality...

Code injection

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authenticated users to affect confidentiality via vectors related to PIA Search Functionality...

CVE-2015-0496

CVE-2015-0496 affects Oracle PeopleSoft: PeopleSoft Enterprise PeopleTools component, specifically the PIA Search Functionality, in Oracle PeopleSoft products with version 8.53 and 8.54. The vulnerability is described as unspecified but allows remote authenticated users to affect confidentiality ...

CVE-2015-0496

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authenticated users to affect confidentiality via vectors related to PIA Search Functionality...

CVE-2015-0496: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authenticated users to affect confidentiality via vectors related to PIA Search Functionality...

CVE-2014-2026

Cross-site scripting XSS vulnerability in the search functionality in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to inject arbitrary web script or HTML via the request parameter...

CVE-2014-2026: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the search functionality in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to inject arbitrary web script or HTML via the request parameter...

gollum-grit_adapter Search Functionality Allows Arbitrary Command Execution

The gollum-gritadapter gem contains a flaw that can allow arbitrary command execution. Grit implements its search functionality by shelling out to git grep. In turn, git grep takes a -O or --open-files-in-pages option that will pipe the results of grep to an arbitrary process. By failing to...

CVE-2014-6635

Cross-site scripting XSS vulnerability in Exponent CMS 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the src parameter in the search action to index.php...

plazathai.com XSS vulnerability

Open Bug Bounty ID: OBB-51290 Description| Value ---|--- Affected Website:| plazathai.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

Splunk collect file Directory Traversal (CVE-2013-6771)

A directory traversal vulnerability has been found in Splunk. The vulnerability is due to insufficient sanitization of user-provided input to the advanced search functionality in the "file" parameter of the "collect" script...