PT-2018-17272

Name of the Vulnerable Software and Affected Versions: Easy Car Script 2014 Description: The issue exists due to SQL Injection in the s order or s row parameter to the "site search.php" endpoint. Recommendations: For Easy Car Script 2014, avoid using the s order or s row parameters in the "site...

clarisse.us XSS vulnerability

Vulnerable URL: http://www.clarisse.us/site-search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2070286 VIP website status:| No Coordinated Disclosure Timeline: Description|...

CVE-2016-4847

Cross-site scripting XSS vulnerability in site/search.php in OSSEC Web UI before 0.9 allows remote attackers to inject arbitrary web script or HTML by leveraging an unanchored regex...

CVE-2016-4847

Cross-site scripting XSS vulnerability in site/search.php in OSSEC Web UI before 0.9 allows remote attackers to inject arbitrary web script or HTML by leveraging an unanchored regex...

CVE-2016-4847: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in site/search.php in OSSEC Web UI before 0.9 allows remote attackers to inject arbitrary web script or HTML by leveraging an unanchored regex...

PT-2017-8549

Name of the Vulnerable Software and Affected Versions OSSEC Web UI versions prior to 0.9 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML. The vulnerability is due to an unanchored regex...