2358 matches found
PHP-Fusion-AP-7.00.2-Rus (search.php) disclosure ways
===================================================== PHP-Fusion-AP-7.00.2-Rus search.php disclosure ways ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / /...
PHP-Fusion-AP-7.00.2-Rus (search.php) disclosure ways
Exploit for unknown platform in category web applications ===================================================== PHP-Fusion-AP-7.00.2-Rus search.php disclosure ways ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 ...
CVE-2009-4680
The concrete details show PHPDirectorySource 1.x is affected by a SQL injection in search.php via the st parameter, enabling remote execution of arbitrary SQL commands. CVE-2009-4680 is documented with exact vectors; public references (Exploit-DB, Milw0rm, SecurityFocus, Secunia) corroborate the ...
CVE-2009-4681
CVE-2009-4681 affects phpDirectorySource 1.x; the XSS flaw exists in search.php where a malicious value in the st parameter enables remote injection of arbitrary script/HTML. This CVE entry is supported by multiple references (e.g., exploits and advisories) and is listed in NVD. No explicit remed...
CVE-2009-4681: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to inject arbitrary web script or HTML via the st parameter...
CVE-2009-4680: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to execute arbitrary SQL commands via the st parameter...
vBulletin Version 4.0.2 search.php 跨站漏洞
vBulletin是一款开放源代码的PHP论坛程序 search.php在对用户提交数据处理上存在安全漏洞。 http://www.vbulletin.com/forum/search.php?searchtype=1&contenttype=vBBlogBlogEntry&query=%22%3E%3Ciframe%20src=http://www.gohack.org%3E vBulletin Version 4.0.2 等待官方发补丁...
mhproducts kleinanzeigenmarkt (search.php) SQL Injection
Exploit for unknown platform in category web applications ======================================================== mhproducts kleinanzeigenmarkt search.php SQL Injection ========================================================...
Mhproducts Kleinanzeigenmarkt SQL Injection
----------------------------Information------------------------------------------------ +Name : mhproducts kleinanzeigenmarkt search.php SQL Injection +Autor : Easy Laster +Date : 09.03.2010 +Script : mhproducts kleinanzeigenmarkt +Download : ---------------- +Demo :...
CVE-2009-4677: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.php in phpFK PHP Forum ohne 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
vBulletin 3.0.0 XSS Vulnerability
Exploit for unknown platform in category web applications ================================= vBulletin 3.0.0 XSS Vulnerability ================================= Title: vBulletin 3.0.0 XSS Author: Discovered by ROOTEGY Version: vBulletin Version 3.0.0 3.0.0 - Introduction XSS scripts in the script...
vBulletin 3.0.0 - Cross-Site Scripting
Title: vBulletin 3.0.0 XSS Author: Discovered by ROOTEGY Version: vBulletin Version 3.0.0 =============================================== WWW.sec-war.com =============================================== 3.0.0 - Introduction XSS scripts in the script search.php. In fact, a hole through a browser...
vBulletin 3.0.0 - Cross-Site Scripting
vBulletin 3.0.0 - Cross-Site Scripting Title: vBulletin 3.0.0 XSS Author: Discovered by ROOTEGY Version: vBulletin Version 3.0.0 =============================================== WWW.sec-war.com =============================================== 3.0.0 - Introduction XSS scripts in the script search.ph...
Unfixed XSS vulnerability at www.wontonweb.com
Security researcher Uber0n, has submitted on 26/01/2010 a cross-site-scripting XSS vulnerability affecting www.wontonweb.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/06/2010. It is currently...
Cross site scripting
Cross-site scripting XSS vulnerability in search.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allows remote attackers to inject arbitrary web script or HTML via the order parameter...
CVE-2010-0365: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allows remote attackers to inject arbitrary web script or HTML via the order parameter...
CVE-2009-4616
Cross-site scripting vulnerability (CVE-2009-4616) exists in MYRE Holiday Rental Manager’s search.php, allowing remote attackers to inject arbitrary web script or HTML through the cat_id1 parameter. The affected component is the search function in MYRE Holiday Rental Manager; the root cause is un...
CVE-2009-4616: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.php in MYRE Holiday Rental Manager allows remote attackers to inject arbitrary web script or HTML via the catid1 parameter...
Unfixed XSS vulnerability at www.jfkl.org.my
Security researcher vir0e5, has submitted on 01/11/2010 a cross-site-scripting XSS vulnerability affecting www.jfkl.org.my, which at the time of submission ranked 2807874 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is current...