CVE-2021-38146: Improper Limitation of a Pathname to a Restricted Directory

The File Download API in Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to read arbitrary files via absolute path traversal in the SearchString JSON field in /home/download POST data...

SpeakOut! Email Petitions < 2.13.3 - Reflected Cross-Site Scripting

The plugin does not escape its searchString parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting issue PoC https://example.com/wp-admin/admin.php?page=dkspeakoutsignatures=search="...

Trend Micro Encryption for Email Gateway emailSearch SearchString SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary SQL statements on vulnerable installations of Trend Micro Encryption for Email Gateway. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exist...

Trend Micro Email Encryption Gateway SQL Injection Vulnerability (CNVD-2018-04494)

Trend Micro Email Encryption is a suite of identity-based email encryption solutions from Trend Micro, Inc. The Trend Micro Email Encryption Gateway TMEEG is one of the gateway products that provides data protection. A SQL injection vulnerability exists in the search configuration script in Trend...

equ.su XSS vulnerability

Vulnerable URL: http://www.equ.su/shop.php?searchstring=...

autofiat.perm.ru XSS vulnerability

Vulnerable URL: http://autofiat.perm.ru/index.php?searchstring=...

CVE-2010-5314

Cross-site scripting XSS vulnerability in controllers/homecontroller.php in BEdita before 3.1 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to news/index...

CVE-2010-5314: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in controllers/homecontroller.php in BEdita before 3.1 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to news/index...

CVE-2014-4517: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in getNetworkSites.php in the CBI Referral Manager plugin 1.2.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the searchString parameter...

CVE-2011-5105: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in EmployeeSearch.cc in ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 allow remote attackers to inject arbitrary web script or HTML via the 1 searchType and 2 searchString parameters, a different vulnerability than CVE-2010-3274...

CVE-2010-3274

Multiple cross-site scripting XSS vulnerabilities in EmployeeSearch.cc in the Employee Search Engine in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allow remote attackers to inject arbitrary web script or HTML via the searchString parameter in a 1 showList or 2 Search action...

CVE-2010-3274: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in EmployeeSearch.cc in the Employee Search Engine in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allow remote attackers to inject arbitrary web script or HTML via the searchString parameter in a 1 showList or 2 Search action...

Shop Script Cross Site Scripting

® -SHOP-SCRIPT XSS Remote Vulnerabilities- Script : shop-script premium Language : php Web Site : http://www.shop-script.com Autor : u.f. Thanks to : Jason, bull, T0r3x, Clark, Meth0d and all members r1zen.org Exploit Info Vuln is : /index.php? http://www.localhost.com/index.php?searchstring=XSS...

CVE-2008-0265: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Search function in the web management interface in F5 BIG-IP 9.4.3 allow remote attackers to inject arbitrary web script or HTML via the SearchString parameter to 1 listsystem.jsp, 2 listpktfilter.jsp, 3 listltm.jsp, 4 resourcesaudit.jsp, a...

Woltlab Burning Board &lt;= 1.0.2, 2.3.6 search.php SQL Injection Exploit 3

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Response; $| = 1; print " Woltlab Burning Board 2.3.6 = / Lite Exploit Coded by 666 http://blueshisha.mutebox.net Bug by trew \n"; if$ARGV 0 print "x Usage: wbbsploit.pl Target Userid Searchstring\n"; exit; print "...

CVE-2006-5962

Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password fields in the a login screen, and 3 searchstring parameter in b insearchlist.asp...

CVE-2006-5962

Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password fields in the a login screen, and 3 searchstring parameter in b insearchlist.asp...

CVE-2006-2684: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the search module in CMS Mundo 1.0 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter...

CVE-2005-4385: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.htm in Cofax 2.0 RC3 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter...

CVE-2005-4229: Undefined Security Weakness

Cross-site scripting XSS vulnerability in auction.pl in EveryAuction 1.53 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources and...