5 matches found
Linux Distros Unpatched Vulnerability : CVE-2019-7340
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - POST - Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable...
Radexscript CMS 'SEARCH_TERMS' Parameter SQL Injection Vulnerability
Redaxscript is a free content management system CMS based on PHP and MySQL. The system is mainly used for small businesses and private site builders. A SQL injection vulnerability exists in the 'searchpost' function in the includes/search.php script in Redaxscript versions prior to 2.3.0. A remot...
CVE-2009-4866: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.cgi in Matt's Script Archive MSA Simple Search 1.0 allows remote attackers to inject arbitrary web script or HTML via the terms parameter. NOTE: some of these details are obtained from third party information...
CVE-2007-2432
CVE-2007-2432 is an XSS vulnerability in nukedit 4.9.7b affecting the utilities/search.asp endpoint, exploitable via the terms parameter to inject arbitrary web script/HTML. The provided documents consistently describe a client-side/script injection risk without detailing exploitation status or p...
CVE-2007-2432: Undefined Security Weakness
Cross-site scripting XSS vulnerability in utilities/search.asp in nukedit 4.9.7b allows remote attackers to inject arbitrary web script or HTML via the terms parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...