Sitecore CMS 'searchStr' Parameter Cross-Site Scripting Vulnerability

Sitecore CMS is a content management system. A cross-site scripting vulnerability exists in the Sitecore CMS 'searchStr' parameter. As the program fails to sanitize to user-supplied input. An attacker could exploit the vulnerability to execute arbitrary code in a user's browser script on the...

CVE-2017-9356

Sitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr parameter to the /Search-Results URI...

CVE-2017-9356

Sitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr parameter to the /Search-Results URI...

SonicWall SonicOS 5.8.1.8 WAF - POST Inject Vulnerability

Document Title: =============== SonicWall SonicOS 5.8.1.8 WAF - POST Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=769 DELL Sonicwall Bug ID DSBID: 123995 Release Date: ============= 2012-12-18 Vulnerability Laboratory ID VL-ID:...

CVE-2010-4903

SQL injection vulnerability in index.php in CubeCart 4.3.3 allows remote attackers to execute arbitrary SQL commands via the searchStr parameter...

CVE-2008-1550

Multiple cross-site scripting XSS vulnerabilities in index.php in CubeCart 4.2.1 allow remote attackers to inject arbitrary web script or HTML via 1 the a parameter in a searchStr action and the 2 Submit parameter...