330 matches found
phpWebSite search module cross-site scripting vulnerability-vulnerability warning-the black bar safety net
phpWebSite is a Web Content Management SystemCMS. phpWebSite realization on the presence of input validation vulnerabilities, a remote attacker could exploit this vulnerability in the user's browser to execute malicious code. phpWebSite search module does not properly escape user input in the...
phpWebSite search module cross-site scripting vulnerability-vulnerability warning-the black bar safety net
Affected systems: Appalachian State Universit phpWebSite 1.4.0 Description: BUGTRAQ ID: 2 7 0 9 0 phpWebSite is a Web Content Management SystemCMS. phpWebSite realization on the presence of input validation vulnerabilities, a remote attacker could exploit this vulnerability in the user's browser ...
XSS vulnerability in Pligg search module
Vulnerability ID: HTB22467 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpliggsearchmodule.html Product: Pligg Vendor: Pligg, LLC http://www.pligg.com/demo/ Vulnerable Version: 1.0.4 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: XSS Cross Site...
Joomla! Component MyHome - Blind SQL Injection
Joomla! Component MyHome - Blind SQL Injection Name : Joomla commyhome BSQLi Vulnerability Date : july 10,2010 Critical Level : HIGH vendor URL :http://www.unisoft.me/ Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger greetz t...
XSS vulnerability in the search module of synType CMS
Vulnerability ID: HTB22416 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinthesearchmoduleofsyntypecms.html Product: synType CMS Vendor: MindArray GbR Vulnerable Version: V.0.12.2 and Probably Prior Versions Vendor Notification: 03 June 2010 Vulnerability Type: XSS Cross Site Scripti...
phpcms2008 sp4 网站内容管理系统搜索模块跨站漏洞
Phpcms 是国内领先的网站内容管理系统，同时也是一个开源的PHP开发框架。Phpcms由内容模型、会员、问吧、专题、财务、订单、广告、邮件订阅、 短消息、自定义表单、全站搜索等20多个功能模块组成，内置新闻、图片、下载、信息、产品5大内容模型。Phpcms 采用模块化开发，支持自定义内容模型和会员模型，并且可以自定义字段。 搜索没有进行有效的处理，造成跨站漏洞 phpcms2008 sp4 厂商补丁： PHPCMS ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.phpcms.cn/...
Joomla DJ Classifieds Shell Upload
Exploit Title:Upload Vulnerability in comdjclassifieds Version: Web Application vendor :http://dj-extensions.com/ Date: 2 apr,2010 Dork:inurl:comdjclassifieds Author:Sid3^effects Code : ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888 888. .8888. .8' 888 888 888 .8'888. .8' 8...
Joomla! Component com_djClassifieds 0.9.1 - Arbitrary File Upload
Joomla! Component comdjClassifieds 0.9.1 - Arbitrary File Upload Dork:inurl:comdjclassifieds ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888 888. .8888. .8' 888 888 888 .8'888. .8' 888 888 888.8' 888.8' 888 88b ooo 888' 888' o888o Y8bood8P' 8' 8'...
JavaPont local file inclusion vulnerability
Exploit for unknown platform in category web applications =========================================== JavaPont local file inclusion vulnerability =========================================== JavaPont SQL Injection LFI Vulnerability Author : Palyo34 Homepage : http://www.1923turk.com Vulnerable Fil...
JavaPont Local File Inclusion
JavaPont SQL Injection LFI Vulnerability Author : Palyo34 Homepage : http://www.1923turk.com Vulnerable File index.php?module=search&q= XpL XpL ../../../../../../../../../../../../../../../etc/passwd%00 Demo...
jCore CMS Cross Site Scripting Vulnerability
No description provided by source. Found: loneferret Vendor: jCore Site: http://www.jcore.net/home Software link: http://www.jcore.net/downloads Search page is vulnerable to cross-site scripting. Exploit: http://server/modules/search?search=xss here http://server/modules/search?search=/axss here...
jCore - search Cross-Site Scripting
jCore - search Cross-Site Scripting source: https://www.securityfocus.com/bid/41748/info jCore is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
jCore CMS - Cross-Site Scripting
Found: loneferret Vendor: jCore Site: http://www.jcore.net/home Software link: http://www.jcore.net/downloads Search page is vulnerable to cross-site scripting. Exploit: http://server/modules/search?search=xss here http://server/modules/search?search=xss here Example: The result page will screw u...
CVE-2009-2438
Cross-site scripting XSS vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows remote attackers to inject arbitrary web script or HTML via the text parameter in a list action. NOTE: this might overlap CVE-2008-1399...
CVE-2009-2438
CVE-2009-2438 describes a cross-site scripting (XSS) vulnerability in ClanSphere, affecting versions 2009.0 and 2009.0.2. The flaw allows remote injection of arbitrary script/HTML via the text parameter in a list action within the search module (index.php). The root cause is an input handling iss...
Turnkey Ebook Store 1.1 Cross Site Scripting
Turnkey Ebook Store v1.1 - Cross site Scripting and Redirect Link: http://www.privatelabelresellrights-store.com/ebookstore/ - 31-03-2009 - Methodman - http://nemesis.te-home.net - Vulnerability was found on search module. example: - http://site.com/index.php?cmd=search&keywords="alert'XSS' -...
SecurityFocus.com Cross Site Scripting
Original Advisory http://www.dsecrg.com/pages/vul/show.php?id=63 Digital Security Research Group DSecRG Advisory DSECRG-09-007 Application: SecurityFocus.com Vendor URL: http://www.securityfocus.com Bugs: XSS Exploits: YES Reported: 21.01.2009 Vendor response: none Second report: 23.01.2009 Vendo...
Cross-Site Scripting vulnerability in Xaraya
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в системе Xaraya. XSS: Уязвимость в index.php в параметре d. http://site/?module=search&q=';alertdocument.cookie;// В последних версиях системы уязвимость уже исправлена. Дополнительная информация о данной уязвимост...
CVE-2008-2915
Multiple SQL injection vulnerabilities in jobseekers/JobSearch.php aka the search module in Pre Job Board allow remote attackers to execute arbitrary SQL commands via the 1 position or 2 kw parameter...