CVE-2008-2839

Cross-site scripting XSS vulnerability in the search module in Traindepot 0.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to index.php...

CVE-2008-2839

CVE-2008-2839 is a reported cross-site scripting (XSS) vulnerability in the Traindepot 0.1 search module. The issue arises when an attacker can inject arbitrary script or HTML through the query parameter to index.php, potentially affecting users who load the affected page. The provided data ident...

CVE-2008-2839

Cross-site scripting XSS vulnerability in the search module in Traindepot 0.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter to index.php...

Pre Job Board - 'JobSearch.php' SQL Injection

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Pre Job Board JobSearch.php Remote SQL Injection Vulnerability +==-- --==+====================================================================================+==-- - dreaming of necessity is reason ...

Movable Type vulnerabile to cross-site scripting

Overview Movable Type, a web log system from Six Apart, contains a cross-site scripting vulnerability in its search module. Impact An arbitrary script may be executed on the user's web browser. In addition, if session information from a cookie is leaked, session hijacking could be conducted...

CVE-2008-0461

SQL injection vulnerability in index.php in the Search module in PHP-Nuke 8.0 FINAL and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the sid parameter in a comments action to modules.php. NOTE: some of these details are obtained from thir...

CVE-2008-0461

CVE-2008-0461 concerns a SQL injection in PHP-Nuke’s Search module. The vulnerability resides in index.php for PHP-Nuke 8.0 FINAL and earlier when magic_quotes_gpc is disabled. An attacker can craft requests exploiting the sid parameter in a “comments” action to modules.php to execute arbitrary S...

phpnuke80final-sql.txt

?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit' $result=sendit'CONCAT"::",aid,"::",pwd,"::"'; if...

PHP-Nuke <= 8.0 Final (sid) Remote SQL Injection Exploit

No description provided by source. ?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit'...

PHP-Nuke 8.0 Final - sid SQL Injection

PHP-Nuke 8.0 Final - sid SQL Injection ?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit'...

PHP-Nuke <= 8.0 Final (sid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== PHP-Nuke = 8.0 Final sid Remote SQL Injection Exploit ======================================================== ?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for...

PHP-Nuke 8.0 Final - &#039;sid&#039; SQL Injection

?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit' $result=sendit'CONCAT"::",aid,"::",pwd,"::"'; if...

CVE-2008-0092

Cross-site scripting XSS vulnerability in index.php in the search module in Appalachian State University phpWebSite 1.4.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in the search module in Appalachian State University phpWebSite 1.4.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2008-0092

Cross-site scripting XSS vulnerability in index.php in the search module in Appalachian State University phpWebSite 1.4.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

Code injection

Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...

CVE-2003-1435

SQL injection vulnerability in PHP-Nuke 5.6 and 6.0 allows remote attackers to execute arbitrary SQL commands via the days parameter to the search module...

CVE-2007-4212

Multiple cross-site scripting XSS vulnerabilities in the Search Module in PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via a trailing "" in 1 the onerror attribute of an IMG element, 2 the onload attribute of an IFRAME element, or 3 redirect users to other sites via the...

CVE-2007-4212

CVE-2007-4212 concerns multiple XSS flaws in the PHP-Nuke Search Module. The vulnerabilities allow remote attackers to inject arbitrary script/HTML by supplying a trailing “” in: (1) the onerror attribute of IMG, (2) the onload attribute of IFRAME, or (3) redirect via the META tag. Affected softw...

CVE-2007-4212

Multiple cross-site scripting XSS vulnerabilities in the Search Module in PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via a trailing "" in 1 the onerror attribute of an IMG element, 2 the onload attribute of an IFRAME element, or 3 redirect users to other sites via the...