4 matches found
Software PBLang 4.65 search.php XSS vulnerability
HRG - Hackerlounge Research Group Release: HRG001 Friday 11-02-05 Software PBLang 4.65 search.php XSS vulnerability The author can't be held responsible for any damage done by a reader. You have your own resonsibility Please use this document like it's meant to. Vulnerable: PBLang 4.65 current an...
phpBB 1.x2.0.x - search.php?search_results SQL Injection
phpBB 1.x2.0.x - search.php?searchresults SQL Injection source: https://www.securityfocus.com/bid/9883/info A vulnerability has been reported to exist in the software that may allow a remote user to inject malicious SQL syntax into database queries. The problem reportedly exists in one of the...
phpBB 2.06 search.php SQL injection
Hello bugtraq readers, A vulnerability exists in phpBB 2.06 that could allow an attacker to manipulate SQL queries and gain administrative control over the forum. The search.php script of the application does not sufficiently sanitize the input of the "searchid" parameter. As a result of this an...
Gallery search.php searchstring Parameter XSS
The version of Gallery hosted on the remote web server is affected by a cross-site scripting attack due to a failure to properly sanitize user-supplied input to the 'searchstring' parameter of the 'search.php' script. A remote attacker may use this to steal the cookies from the legitimate users o...