CVE-2019-20220

In Support Incident Tracker SiT! 3.67, the searchid parameter in the searchincidentsadvanced.php page is affected by XSS...

EUVD-2003-1206

Malware in sbrugna...

EUVD-2019-10774

Malware in sbrugna...

CVE-2019-20220

In Support Incident Tracker SiT! 3.67, the searchid parameter in the searchincidentsadvanced.php page is affected by XSS...

Support Incident Tracker Cross-Site Scripting Vulnerability (CNVD-2020-04719)

Support Incident Tracker SiT! is a PHP and MySQL based technical support phone/email tracking system. A cross-site scripting vulnerability exists in the 'searchid' parameter of the searchincidentsadvanced.php page in SiT! version 3.67, which stems from the lack of proper validation of client-side...

CVE-2019-20220: Improper Neutralization of Input During Web Page Generation

In Support Incident Tracker SiT! 3.67, the searchid parameter in the searchincidentsadvanced.php page is affected by XSS...

CVE-2007-2234: Undefined Security Weakness

include/common.php in PunBB 1.2.14 and earlier does not properly handle a disabled iniget function when checking the registerglobals setting, which allows remote attackers to register global parameters, as demonstrated by an SQL injection attack on the searchid parameter to search.php...

CVE-2003-1216: Undefined Security Weakness

SQL injection vulnerability in search.php for phpBB 2.0.6 and earlier allows remote attackers to execute arbitrary SQL and gain privileges via the searchid parameter...

phpBB206.txt

phpBB v2.06 searchid sql injection exploit -Hat-Squad Security Team- Using this query you will get MD5 password hash for useruid as highlight variable for viewtopic.php in search results page.Works with mysql4. http://site.com/search.php?searchid=1%20union%20select%20concatchar...