Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Silurus Classifieds 1.0 allow remote attackers to inject arbitrary web script or HTML via the ID parameter to 1 category.php and 2 wcategory.php, and the 3 keywords parameter to search.php...

CVE-2009-4983

Multiple cross-site scripting XSS vulnerabilities in Silurus Classifieds 1.0 allow remote attackers to inject arbitrary web script or HTML via the ID parameter to 1 category.php and 2 wcategory.php, and the 3 keywords parameter to search.php...

Gazelle CMS - Multiple Vulnerabilities

Gazelle CMS - Multiple Vulnerabilities Exploit Title: AnantaGazelle Local File inclusion / Xss Vulnerabilities Date: 23/08/2010 Author: Sweet Contact : [email protected] Software Link: www.anantasoft.com Download:http://www.anantasoft.com/index.php?Gazelle%20CMS/Download Version: AnantaGazelle1...

Webedition 6.0.0.8 (Search.php) Denial of Service

Exploit for php platform in category web applications =============================================================== Webedition 6.0.0.8 Search.php Denial of Service Vulnerability ===============================================================...

Unfixed XSS vulnerability at deel.xia.jp

Security researcher pimpim, has submitted on 08/07/2010 a cross-site-scripting XSS vulnerability affecting deel.xia.jp, which at the time of submission ranked 4628431 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2010. It is currently...

MyPHP Forum SQL injection vulnerability-vulnerability warning-the black bar safety net

Affected system: MyPHP. ws MyPHP Forum v3. 0 Final Description: BUGTRAQ ID: 2 7 1 1 8 MyPHP Forum is an easy to erect and easy to use based on MySQL with PHP Forum. MyPHP Forum process user requests data when there is an input validation vulnerability, a remote attacker could exploit this...

Unfixed XSS vulnerability at www.comes.com.pl

Security researcher cbr, has submitted on 25/07/2010 a cross-site-scripting XSS vulnerability affecting www.comes.com.pl, which at the time of submission ranked 1117472 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

Pligg 'search.php' Cross Site Scripting Vulnerability

Pligg is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal...

ecshop shop system is a variant of the invasion-bug warning-the black bar safety net

EXP variants of code:search. php? encode=YToxOntzOjQ6ImF0dHIiO2E6MTp7czoxmju6ijenksbhbmqgmt0yiedst1vqiejzigdvb2rzx2lkihvuaw9uigfsbcbzzwxly3qgy29uy2f0khvzzxjfbmftzswwednhlhbhc3n3b3jklccixccpihvuaw9uihnlbgvjdcaxiyinkswxigzyb20gzwnzx2fkbwlux3vzzxijijtzoje6ijeio319 For example: http://www.. com/searc...

E-Book Store - SQL Injection

:::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = E-Book Store SQL Injection Vulnerability Author = Valentin Hoebel Contact = [email protected] :::::::::::::::::::::::::::::::::::::: 0x2...

E-Book Store - SQL Injection

E-Book Store - SQL Injection :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = E-Book Store SQL Injection Vulnerability Author = Valentin Hoebel Contact = [email protected] :::::::::::::::::::::::::::::::::::::: 0x2...

EasyCarportal Xss / Sql Injection Vulnerability

Exploit for php platform in category web applications =============================================== EasyCarportal Xss / Sql Injection Vulnerability =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 ...

CVE-2010-2042

SQL injection vulnerability in search.php in ECShop 2.7.2 allows remote attackers to execute arbitrary SQL commands via the encode parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in search.php in ECShop 2.7.2 allows remote attackers to execute arbitrary SQL commands via the encode parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-2040

CVE-2010-2040 is an XSS in search.php of V-EVA Shopzilla Affiliate Script PHP, exploitable via the s parameter to inject arbitrary script/HTML. Connected sources confirm the vulnerability description but do not provide concrete patch/version details or exploitation specifics. No remediation, affe...

CVE-2010-2042

ECShop 2.7.2 has an SQL injection in search.php via the encode parameter, allowing remote execution of arbitrary SQL commands. Affected component: ECShop (version 2.7.2); vulnerability arises from improper handling in search.php. Impact details and remediation steps are not provided in the suppli...

CVE-2010-2040

Cross-site scripting XSS vulnerability in search.php in V-EVA Shopzilla Affiliate Script PHP allows remote attackers to inject arbitrary web script or HTML via the s parameter...

ECShop Search.php SQL Injection Exploit

Exploit for php platform in category web applications ======================================= ECShop Search.php SQL Injection Exploit ======================================= Author: Jannock Software Link: http://www.ecshop.com Version: ECShop All Version Tested on: CVE : WAVDB: WAVDB-01606 Code :...

ECShop - 'search.php' SQL Injection

Exploit Title: ECShop Search.php SQL Injection Exploit Date: 2010-05-17 Author: Jannock Software Link: http://www.ecshop.com Version: ECShop All Version Tested on: CVE : WAVDB: WAVDB-01606 Code : ". "\n+ Ex.: php ".$argv0." localhost / 1". "\n\n"; function query$pos, $chr, $chs,$goodid switch $ch...

ECShop SQL Injection

Exploit Title: ECShop Search.php SQL Injection Exploit Date: 2010-05-17 Author: Jannock Software Link: http://www.ecshop.com Version: ECShop All Version Tested on: CVE : WAVDB: WAVDB-01606 Code : ". "\n+ Ex.: php ".$argv0." localhost / 1". "\n\n"; function query$pos, $chr, $chs,$goodid switch $ch...