wsCMS Cross Site Scripting / SQL Injection

Exploit Title: wsCMS alert/farbodmahini/ www.wbnb-fanb.ca/search.php?search=alert/farbodmahini/ www.gowanbrae.ca/search.php?search=alert/farbodmahini/ Special Thanks : Mehdi.H4ckcity-2MzRp-Mikili-M.Prince-Bl4ck.Viper-iC0d3R- IrIsT-K0242-P0W3RFU7-Mr.M4st3r-HigherSense ,... GreetZ : All H4ckCity...

CVE-2011-5022

Summary: CVE-2011-5022 affects Pligg CMS 1.1.2, with an SQL injection in search.php via the status parameter. The root cause is improper handling of user-supplied input in the search functionality, enabling arbitrary SQL execution by remote attackers. Impact (as stated): Remote attackers can exec...

CVE-2011-5022: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in search.php in Pligg CMS 1.1.2 allows remote attackers to execute arbitrary SQL commands via the status parameter...

Unfixed XSS vulnerability at mzc.in

Security researcher bios terminator, has submitted on 27/12/2011 a cross-site-scripting XSS vulnerability affecting mzc.in, which at the time of submission ranked 120853 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/12/2011. It is currentl...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Wuzly 2.0 allow remote attackers to inject arbitrary web script or HTML via the Referer header to 1 admin/login.php and 2 admin/404.php; the 3 q parameter to search.php; the 4 themename parameter to themesettings.php, 5 extensionname parameter ...

CVE-2011-3835

Multiple cross-site scripting XSS vulnerabilities in Wuzly 2.0 allow remote attackers to inject arbitrary web script or HTML via the Referer header to 1 admin/login.php and 2 admin/404.php; the 3 q parameter to search.php; the 4 themename parameter to themesettings.php, 5 extensionname parameter ...

PT-2011-4719

Name of the Vulnerable Software and Affected Versions Wuzly version 2.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via various parameters and headers, including the Referer header to admin/login.php and admin/404.php, the q parameter to search.php, the...

CVE-2011-3835: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Wuzly 2.0 allow remote attackers to inject arbitrary web script or HTML via the Referer header to 1 admin/login.php and 2 admin/404.php; the 3 q parameter to search.php; the 4 themename parameter to themesettings.php, 5 extensionname parameter ...

Unfixed XSS vulnerability at www.mydealspy.com

Security researcher Codeshift3r, has submitted on 18/12/2011 a cross-site-scripting XSS vulnerability affecting www.mydealspy.com, which at the time of submission ranked 4250974 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is...

Unfixed XSS vulnerability at www.wnet.co.il

Security researcher Codeshift3r, has submitted on 17/12/2011 a cross-site-scripting XSS vulnerability affecting www.wnet.co.il, which at the time of submission ranked 32143 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is...

CVE-2011-4540: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in AtMail Open aka AtMail Open-Source edition 1.04 allow remote attackers to inject arbitrary web script or HTML via the func parameter to 1 ldap.php or 2 search.php...

PT-2011-4975

Name of the Vulnerable Software and Affected Versions AtMail Open versions 1.04 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the func parameter in the "ldap.php"...

CVE-2010-5062

SQL injection vulnerability in search.php in MH Products kleinanzeigenmarkt allows remote attackers to execute arbitrary SQL commands via the c parameter...

Sql injection

SQL injection vulnerability in search.php in MH Products kleinanzeigenmarkt allows remote attackers to execute arbitrary SQL commands via the c parameter...

CVE-2010-5062

SQL injection vulnerability in search.php in MH Products kleinanzeigenmarkt allows remote attackers to execute arbitrary SQL commands via the c parameter...

CVE-2010-5062

CVE-2010-5062 affects MH Products kleinanzeigenmarkt; vulnerability in search.php, via the c parameter, allows remote attackers to perform SQL injection and execute arbitrary SQL commands. Root cause: improper input handling in the search functionality leading to unauthenticated database access. ...

PT-2011-1997

Name of the Vulnerable Software and Affected Versions MH Products kleinanzeigenmarkt affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the c parameter in the "search.php" file. Recommendations At the moment, there...

CVE-2010-5062: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in search.php in MH Products kleinanzeigenmarkt allows remote attackers to execute arbitrary SQL commands via the c parameter...

MyChurchWebsite Cross Site Scripting

Exploit Title: MyChurchWebsite XSS Date: 04.11.2011 - 17.55 Author: Mr.PaPaRoSSe Tested On: BackTrack 5 - Win7 Platform: Php ------------------------------------------------------------- alertdocument.cookie search.php?pageID=search&search=XSS...

Jara 1.6 - Multiple Vulnerabilities

Jara 1.6 - Multiple Vulnerabilities !/Mohammed/bin/YahYa Jara v1.6 Multiple Vulnerabilities -------------------------------------------+ download : http://sourceforge.net/projects/jara/files/v1.6/jarav16.zip AutHOr : Or4nG.M4n cOntAct : priv8teathotmail.com versiOn : v1.6 Tested : My Mind :...