330 matches found
CVE-2005-3837
The CVE-2005-3837 issue is an XSS vulnerability in the search module of sCssBoard (versions 1.2, 1.12 and earlier). The underlying flaw is in the search_term parameter, allowing remote attackers to inject arbitrary script/HTML. Impact and exploit details are limited to what the sources state: a m...
CVE-2005-3792
Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with patch 3.1, allows remote attackers to execute arbitrary SQL commands, as demonstrated via the query parameter in a stories type...
CVE-2005-3792
Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with patch 3.1, allows remote attackers to execute arbitrary SQL commands, as demonstrated via the query parameter in a stories type...
CVE-2005-3748
SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the query parameter...
CVE-2005-3748
SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the query parameter...
PHP-Nuke <= 7.8 Search Module Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================== PHP-Nuke new Proto = "tcp", PeerAddr = "$HOST", PeerPort = "80" || die " Connect FAILED\n"; print " Connected OK\n"; print " Sending exploit OK\n\n"; print $send "POST ".$GET."...
PHP-Nuke 7.8 Search Module - SQL Injection
PHP-Nuke 7.8 Search Module - SQL Injection !/usr/bin/perl -w use IO::Socket; if @ARGV new Proto = "tcp", PeerAddr = "$HOST", PeerPort = "80" || die " Connect FAILED\n"; print " Connected OK\n"; print " Sending exploit OK\n\n"; print $send "POST ".$GET." HTTP/1.0\n"; print $send "Host: ".%HOST."\n...
CVE-2005-3436
CVE-2005-3436 affects Nuked-Klan 1.7 with a cross-site scripting (XSS) vulnerability. The issue permits injection of arbitrary web script or HTML via multiple inputs: (1) the Search module, (2) specific fields in Guestbook, (3) the Forum module title, and (4) Textbox. The root cause is unsanitize...
PHP-Nuke Search Module - modules.php Directory Traversal
PHP-Nuke Search Module - modules.php Directory Traversal source: https://www.securityfocus.com/bid/15137/info PHPNuke Search Module is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input. A remote attacker may view files that are only...
[Full-disclosure] Security Advisory: SQL injection in PhpWebSite <= 0.10.1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ======================================================================== phpWebSite Security Advisory [email protected] http://phpwebsite.appstate.edu Kevin Wilcox 12 October 2005...
PT-2005-3706 · Maxdev · Maxdev Md-Pro
Name of the Vulnerable Software and Affected Versions: MAXdev MD-Pro versions 1.0.72 and earlier Description: The issue affects one or more modules in MAXdev MD-Pro, including the Download, Search, Web links, Blocks, Messages, News, Comments, Settings, Stats, or subjects modules. The impact and...
CVE-2005-2416
Multiple cross-site scripting XSS vulnerabilities in Contrexx before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the 1 term parameter to the search module or 2 title in the blog aggregation module...
CVE-2005-2416
Multiple cross-site scripting XSS vulnerabilities in Contrexx before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the 1 term parameter to the search module or 2 title in the blog aggregation module...
PT-2005-1620 · Phpwebsite · Phpwebsite
Name of the Vulnerable Software and Affected Versions: phpWebSite versions 0.10.0 and earlier Description: The issue allows remote attackers to obtain sensitive information via an invalid SEA search module parameter, which reveals the path in a PHP error message. Recommendations: For phpWebSite...
CVE-2004-0269
SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive information via 1 the category variable in the Search module or 2 the admin variable in the WebLinks module...
CVE-2004-0736
The search module in Php-Nuke allows remote attackers to gain sensitive information via the 1 "" or 2 "+" search patterns, which reveals the path in an error message...
CVE-2004-0732
CVE-2004-0732 describes a SQL injection in Php-Nuke’s Search module (index.php) exploitable via the instory parameter. Root cause: insufficient input validation in the Search module, enabling remote attackers to inject arbitrary SQL. Impact per CVSSv2 is partial disclosure, modification, and disr...
CVE-2004-0736
CVE-2004-0736 affects Php-Nuke’s search module. The issue lets remote attackers glean sensitive information by using the (1) "**" and (2) "+" search patterns, which reveal the application path in error messages. The available documents do not specify affected Php-Nuke versions or a concrete patch...
CVE-2004-0731
CVE-2004-0731 describes a cross-site scripting (XSS) vulnerability in the Php-Nuke software, specifically in index.php within the Search module. The issue allows remote attackers to inject arbitrary script as other users via the input field. The CVSS metrics indicate a network-accessible flaw wit...