Calendar Express - search.php Cross-Site Scripting

Calendar Express - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/22578/info Calendar Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrar...

Unfixed XSS vulnerability at www.bilinmeyen.com

Security researcher amele2, has submitted on 15/02/2007 a cross-site-scripting XSS vulnerability affecting www.bilinmeyen.com, which at the time of submission ranked 320097 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/02/2007. It is...

ipb search.php vulnerability analysis and thinking-vulnerability warning-the black bar safety net

ipb search.php vulnerability analysis and thinking A vulnerability model may unearth a batch of vulnerabilities Idea is the most important pregreplace+/e Author: SuperHeiAtph4nt0m.org Blog: http://superhei.blogbus.com/ Team: http://www.ph4nt0m.org Data: 2006-04-27 Simple analysis The vulnerabilit...

Sql injection

SQL injection vulnerability in i-search.php in Michelle's L2J Dropcalc 4 and earlier allows remote authenticated users to execute arbitrary SQL commands via the itemid parameter...

CVE-2007-0687

CVE-2007-0687 describes an SQL injection in i-search.php of Michelle's L2J Dropcalc 4 and earlier. The vulnerability allows remote authenticated users to inject arbitrary SQL via the itemid parameter, potentially impacting data confidentiality and integrity. Affected software: Michelle's L2J Drop...

CVE-2007-0687: Undefined Security Weakness

SQL injection vulnerability in i-search.php in Michelle's L2J Dropcalc 4 and earlier allows remote authenticated users to execute arbitrary SQL commands via the itemid parameter...

CVE-2007-0550

The CVE-2007-0550 entry concerns a Cross-Site Scripting (XSS) vulnerability in the search.php component of 212cafeBoard 0.08 Beta. The flaw allows remote attackers to inject arbitrary web script or HTML via the keyword parameter, as documented by the NVD entry with CVSS 2.0 base score 6.8 (Medium...

CVE-2007-0550: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.php in 212cafeBoard 0.08 Beta allows remote attackers to inject arbitrary web script or HTML via keyword parameter...

CVE-2007-0477: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Openads 2.0.x before 2.0.10, 2.3 before 2.3.31 aka Max Media Manager before 0.3.31-alpha-pr2, and phpAdsNew/phpPgAds before 2.0.9-pr1 allows remote attackers to inject arbitrary web script or HTML via 1 the keyword parameter in admin-search.php and 2...

indexu-xss.txt

vulnerability script indexu all versions Found by :SwEET-DeViL & viP HaCkEr & HaCkEr sUn TeaM AL-GaRNi Application : indexu version : all versions URL : http://www.nicecoder.com/ google : "Powered by INDEXU 5." Exploits : |//1\| in upgrade.php...

CVE-2007-0388

SQL injection vulnerability in search.php in Woltlab Burning Board wBB 1.0.2 and earlier, and 2.3.6 and earlier in the 2.x series, allows remote attackers to execute arbitrary SQL commands via the boardids1 and other boardids parameters...

CVE-2007-0388

CVE-2007-0388 affects Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.x up to 2.3.6. The vulnerability is a SQL injection in the search.php handling of boardids[1] and other boardids[] parameters due to unsafe input handling, allowing remote attackers to execute arbitrary SQL commands. Publi...

CVE-2007-0363: Undefined Security Weakness

Cross-site scripting XSS vulnerability in admin-search.php in 1 Openads for PostgreSQL aka phpPgAds before 2.0.10 and 2 Openads aka phpAdsNew before 2.0.10 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2007-0388: Undefined Security Weakness

SQL injection vulnerability in search.php in Woltlab Burning Board wBB 1.0.2 and earlier, and 2.3.6 and earlier in the 2.x series, allows remote attackers to execute arbitrary SQL commands via the boardids1 and other boardids parameters...

Woltlab Burning Board <= 1.0.2, 2.3.6 search.php SQL Injection Exploit

No description provided by source. ?php / http://www.undergroundagents.de coded by silent vapor [email protected] / printr' -------------------------------------------------------------------------------- Woltlab Burning Board Lite = 1.0.2 GetHashes over search.php Woltlab Burning...

Woltlab Burning Board Search.PHP SQL注入漏洞

Woltlab Burning Board是一款基于PHP的WEB应用程序。 Woltlab Burning Board不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Search.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得敏感信息。 Woltlab Woltlab Burning Board Lite 1.0.2 WoltLab Burning Board Lite 1.0.2 WoltLab Burning Board Lite 1.0.1 e WoltLab Burning Board Lite...

Burning Board search.php boardids Parameter SQL Injection

Binary data 3888.prm...

Woltlab Burning Board 1.0.22.3.6 - search.php SQL Injection (2)

Woltlab Burning Board 1.0.22.3.6 - search.php SQL Injection 2 !/usr/bin/perl Woltlab Burning Board 2.X/Lite search.php SQL Injection exploit - burned.pl written by trew should work on every wbb regardless of php settings. v 1.2 - added 1337 sql filter evasion, version identification,better...

Woltlab Burning Board 1.0.2/2.3.6 - 'search.php' SQL Injection (1)

?php / http://www.undergroundagents.de coded by silent vapor [email protected] / printr' -------------------------------------------------------------------------------- Woltlab Burning Board Lite = 1.0.2 GetHashes over search.php Woltlab Burning Board = 2.3.6 GetHashes over search.p...

Woltlab Burning Board 1.0.2/2.3.6 - 'search.php' SQL Injection (2)

!/usr/bin/perl Woltlab Burning Board 2.X/Lite search.php SQL Injection exploit - burned.pl written by trew should work on every wbb regardless of php settings. v 1.2 - added 1337 sql filter evasion, version identification,better regex,raw cookie v 1.1 - added wbblite support thx to lama !PRIVATE!...