2358 matches found
phpMyRealty <= 1.0.9 - Multiple Remote SQL Injection Vulnerabilities
No description provided by source. phpMyRealty = 1.0.9 pages.php id Remote SQL Injection Vulnerability Author: !DoktOR! Date found: 27.08.08 Product: phpMyRealty Version: 1.0.7, 1.0.9 Download script: http://rapidshare.com/files/123835319/phpMyRealty.v1.0.7.PHP-rs.rar Vulnerability Class: SQL...
Interact 2.4.1 - SQL Injection Vulnerability
No description provided by source. Title: Interact 2.4.1 SQL Injection Title : Interact 2.4.1 SQL Injection Affected Version : Interact = 2.4.1 Vendor Site : http://sourceforge.net/projects/cce-interact/ Discovery : Vulnerabilites : SQL Injection: in search.php file line 44: $searchtermsraw =...
PT News 1.7.8 Search.PHP Cross-Site Scripting Vulnerability
No description provided by source...
yblog 0.2.2.2 (xss/sql) Multiple Vulnerabilities
No description provided by source. / | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title...
City Directory Review and Rating Script (search.php) SQL Injection Vulnerability
No description provided by source. Exploit Title: City Directory Review and Rating Script SQL Injection Vulnerability Date: 22.12.2012 Author: 3spi0n Script Vendor or Software Link: http://b-scripts.com/en/18-city-reviewer-yelp-clone.html Category: WebApps Type: SQL Injection MySQLi Tested On:...
glFusion 1.3.0 (search.php, cat_id param) - SQL Injection
No description provided by source...
WordPress Business Directory Plugin <= 1.0.2 - Multiple XSS
Because of these vulnerabilities in forms/search.php, the attackers can inject arbitrary web script or HTML via the few parameters: "edit", "pagelinks", searchterm, "page" or "pageid". Solution Update the plugin...
CuteCms 3.5 /search.php SQL注入漏洞
No description provided by source...
CVE-2013-0197
Cross-site scripting XSS vulnerability in the filterdrawselectionarea2 function in core/filterapi.php in MantisBT 1.2.12 before 1.2.13 allows remote attackers to inject arbitrary web script or HTML via the matchtype parameter to bugs/search.php...
CVE-2013-0197: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the filterdrawselectionarea2 function in core/filterapi.php in MantisBT 1.2.12 before 1.2.13 allows remote attackers to inject arbitrary web script or HTML via the matchtype parameter to bugs/search.php...
PT-2014-2432
Name of the Vulnerable Software and Affected Versions MantisBT version 1.2.12 Description A cross-site scripting issue exists due to a vulnerability in the filter draw selection area2 function. This allows remote attackers to inject arbitrary web script or HTML via the match type parameter to the...
CVE-2014-1840
Cross-site scripting XSS vulnerability in Upload/search.php in MyBB 1.6.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a dosearch action, which is not properly handled in a forced SQL error message...
CVE-2014-1840
Cross-site scripting XSS vulnerability in Upload/search.php in MyBB 1.6.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a dosearch action, which is not properly handled in a forced SQL error message...
CVE-2014-1840: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Upload/search.php in MyBB 1.6.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a dosearch action, which is not properly handled in a forced SQL error message...
MyBB 1.6.12 SQL Injection
IIIIIIII RRRRRRRRRRRR HHHHHHHH HHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRRRRRRRR HHHHHHHHHHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIIIIIII RRRRRRRR RRRRRR...
MyBB 'search.php'跨站脚本漏洞
BUGTRAQ ID: 65344 CVECAN ID: CVE-2014-1840 MyBB是一个功能完整并且非常实用的论坛软件。 MyBB 1.6.12及其他版本没有正确过滤search.php的参数值，在实现上存在跨站脚本漏洞，攻击者可利用此漏洞在受影响站点上下文中的用户浏览器内执行任意脚本代码。 0 MyBB MyBB 1.6.12 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mybb.com/ html body form name="exploit"...
CuteCms 3.5 /search.php SQL注入漏洞
No description provided by source...
BIWEB企业版多处SQL注入
简要描述： 多个文件SQL注入 详细说明： search.php（BIWEB企业版几乎所有的该文件都存在这个问题） 举例：Product/search.php 文件24-60行（不止这一处） if!empty$REQUEST'productname' $strKeywords = strvalurldecodetrim$REQUEST'productname';//只是进行了简单的过滤空格和url解码 $arrKeywords = explode" ",$strKeywords;//将关键词用空格进行分割 $newArrKeywords = array;...