CVE-2010-4796: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PHPYun 1.1.6 allow remote attackers to execute arbitrary SQL commands via the 1 provinceid parameter to search.php and the 2 e parameter to resumeview.php...

CVE-2011-1668: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in AR Web Content Manager AWCM 2.1, 2.2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the search parameter...

PT-2011-3279

Name of the Vulnerable Software and Affected Versions AR Web Content Manager versions 2.1 through 2.2 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the search parameter in the "search.php" file...

Уязвимости в MyBB

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и SQL DB Structure Extraction уязвимостях в MyBB. Уязвимости имеют место в скриптах search.php и private.php. XSS WASC-08: http://websecurity.com.ua/uploads/2011/MyBB20XSS.html...

AWCM 2.x - search.php Cross-Site Scripting

AWCM 2.x - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47126/info AWCM is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to...

pppBLOG 'search.php' Cross Site Scripting Vulnerability

pppBLOG is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

mvmmall shop Mall system injection vulnerability-vulnerability warning-the black bar safety net

mvmmall shop Mall system, the latest injection 0day issues out in the search search. php this file. The code is as follows: ? php requireonce ‘include/common.inc.php’; requireonce ROOTPATH.’header.php’; if$action!=’ search’ $searchkey = ”; if isset$pssearch //Omitted a bunch of stuff $tagids =...

mvmmall shop Mall system, the latest injection vulnerability and fix(search.php)-vulnerability warning-the black bar safety net

mvmmall shop Mall system, the latest injection 0day issues out in the search search. php this file. The code is as follows: ? php requireonce ‘include/common.inc.php’; requireonce ROOTPATH.’header.php’; if$action!=’ search’ $searchkey = ”; if isset$pssearch //Omitted a bunch of stuff $tagids =...

BoutikOne - 'search.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/46861/info Pixie is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access ...

esp cms injection 0day-vulnerability warning-the black bar safety net

In urldecode the role of the non-filtered result in injection form interface/search.php ---- intaglist ---- $tagkey（ Urldecdoe after processing directly into SQL statement, the injection formedcode omitted Test: http://localhost/espcms/index.php?ac=search&at=taglist&tagkey=dd%2 5 2 7,%2527dd%2 5 ...

Prestashop Cartium 1.3.3 Cross Site Scripting

Hello, In Prestashop Cartium 1.3.3 I have detected multiple Cross Site Scripting XSS vulnerabilities: File Field categoty.php idcategory product.php idproduct search.php searchquery Test pattern for vulnerable versions: "alert1 Kind Regards Antonio San Martino...

Unfixed XSS vulnerability at www.safecosmetics.org

Security researcher EsCaHc, has submitted on 19/01/2011 a cross-site-scripting XSS vulnerability affecting www.safecosmetics.org, which at the time of submission ranked 193599 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/11/2011. It is...

www.eVuln.com : SQL Injection in WikLink

www.eVuln.com advisory: SQL Injection in WikLink Summary: http://evuln.com/vulns/170/summary.html Details: http://evuln.com/vulns/170/description.html -----------Summary----------- eVuln ID: EV0170 Software: WikLink Vendor: n/a Version: 0.1.3 Critical Level: medium Type: SQL Injection Status:...

Interact 2.4.1 - SQL Injection

Interact 2.4.1 - SQL Injection Title: Interact 2.4.1 SQL Injection Title : Interact 2.4.1 SQL Injection Affected Version : Interact l0rd D3lt4l0rD & Turb0 ,,,, [email protected] S.V.T :D...

Interact 2.4.1 SQL Injection

Title: Interact 2.4.1 SQL Injection Title : Interact 2.4.1 SQL Injection Affected Version : Interact l0rd D3lt4l0rD & Turb0 ,,,, [email protected] S.V.T :D...

MyBB 1.6 - search.php?keywords SQL Injection

MyBB 1.6 - search.php?keywords SQL Injection source: https://www.securityfocus.com/bid/45565/info MyBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker t...

MyBB 1.6 - 'search.php?keywords' SQL Injection

source: https://www.securityfocus.com/bid/45565/info MyBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modif...

WSN Links SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================== WSN Links SQL Injection Vulnerability ===================================== I. DESCRIPTION --------------------------------------- A vulnerability exists in the search.php code that allows for SQL injectio...

WSN Links - SQL Injection

'WSN Links' SQL Injection Vulnerability CVE-2010-4006 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the search.php code that allows for SQL injection of various parameters. By assembling portions of SQL code between the...

S_CMS 2.5 - Multiple Vulnerabilities

SCMS 2.5 - Multiple Vulnerabilities ============================================================ Exploit Title: S-CMS Multiple Vuln Date: 14/11/2010 Author: LordTittiS Greetings To: GodOfPain, SystemOveride Software Link: http://www.matteoiammarrone.com http://www.matteoiammarrone.com/public/s-cm...