3 matches found
CVE-2010-1133
Multiple SQL injection vulnerabilities in TikiWiki CMS/Groupware 4.x before 4.2 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, probably related to 1 tiki-searchindex.php and 2 tiki-searchresults.php...
Unfixed XSS vulnerability at www.veosearch.com
Security researcher CrashOver, has submitted on 08/11/2008 a cross-site-scripting XSS vulnerability affecting www.veosearch.com, which at the time of submission ranked 37859 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/12/2008. It is...
CVE-2006-4299
Cross-site scripting XSS vulnerability in tiki-searchindex.php in TikiWiki 1.9.4 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...