EUVD-2013-6606

Malware in sbrugna...

EUVD-2018-11503

Malware in sbrugna...

EUVD-2011-3787

Malware in sbrugna...

Cross site scripting

A vulnerability was found in Creativeitem Atlas Business Directory Listing 2.13 and classified as problematic. Affected by this issue is some unknown functionality of the file /home/search. The manipulation of the argument searchstring leads to cross site scripting. The attack may be launched...

CVE-2023-3756

CVE-2023-3756 affects Creativeitem Atlas Business Directory Listing 2.13. The vulnerability arises from user-controlled input in the /home/search function, where manipulating the argument (notably the search_string) triggers cross-site scripting. Descriptions across multiple feeds consistently id...

Cross site scripting

TemaTres 3.0 has reflected XSS via the replacestring or searchstring parameter to the vocab/admin.php?doAdmin=bulkReplace URI...

CVE-2019-14344

TemaTres 3.0 is affected by a reflected XSS in the vocab/admin.php?doAdmin=bulkReplace endpoint via the replace_string or search_string parameters. The vulnerability stems from insufficient input handling, enabling injection of script/code that can impact user sessions through client-side executi...

CVE-2018-19828

Artica Integria IMS 5.0.83 has XSS via the searchstring parameter...

Code injection

Artica Integria IMS 5.0.83 has XSS via the searchstring parameter...

CVE-2018-19828

Artica Integria IMS 5.0.83 has XSS via the searchstring parameter...

CVE-2018-19828

The CVE-2018-19828 entry affects Integria IMS 5.0.83, where the search_string parameter in index.php is exploitable for Reflected Cross-Site Scripting. The vulnerability is triggered via a GET request and has PoC payloads publicly demonstrated (e.g., payloads like ‘?>[removed]alert(...)’). Pat...

CVE-2007-5428

Cross-site scripting XSS vulnerability in UMI CMS allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to the default URI in searchdo/...

CVE-2006-6769

CVE-2006-6769 applies to PHP Live! 3.2.2 and earlier, with multiple XSS flaws. Vulnerable components/files include transcripts.php (search_string parameter), index.php (l parameter), phplive/index.php (login field), and phplive/message_box.php (deptid and x parameters). Exploits describe arbitrar...

CVE-2006-6589

Cross-site scripting XSS vulnerability in ecommerce/control/keywordsearch in the Apache Open For Business Project OFBiz and Opentaps 0.9.3 allows remote attackers to inject arbitrary web script or HTML via the SEARCHSTRING parameter, a different issue than CVE-2006-6587. NOTE: some of these detai...

CVE-2006-4017

Cross-site scripting XSS vulnerability in the search module in Inter Network Marketing INM CMS G3 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter...

CVE-2004-1979

Cross-site scripting XSS vulnerability in dosearch.php in PROPS 0.6.1 allows remote attackers to inject arbitrary HTML or web script via the searchstring parameter...

CVE-2004-1979

Cross-site scripting XSS vulnerability in dosearch.php in PROPS 0.6.1 allows remote attackers to inject arbitrary HTML or web script via the searchstring parameter...