CVE-2015-3422

Description

References

• packetstormsecurity.com/files/132341/SearchBlox-8.2-Cross-Site-Scripting.html · Exploit
• securityfocus.com/archive/1/535780/100/0/threaded
• securityfocus.com/bid/75263
• htbridge.com/advisory/HTB23256 · Exploit

Altre vulnerabilità di searchblox

• CVE-2020-10132MEDIO 6.1SearchBlox before Version 9.1 is vulnerable to cross-origin resource sharing misconfiguration.
• CVE-2020-10131CRITICO 9.8SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results" parameter.
• CVE-2020-10130ALTO 8.8SearchBlox before Version 9.1 is vulnerable to business logic bypass where the user is able to create multiple super admin users in the syst…
• CVE-2020-10129ALTO 8.8SearchBlox before Version 9.2.1 is vulnerable to Privileged Escalation-Lower user is able to access Admin functionality.
• CVE-2020-10128MEDIO 5.4SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user input parameters. In SearchBlox p…