← Back

Mnogosearch

mnogosearch

Vendor: Mnogosearch • 7 CVEs

CVEs (7)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Mnogosearch
1Mnogosearch
Apr 29, 2026
Oct 25, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in mnoGoSearch before 3.3.12 allows remote attackers to execute arbitrary SQL commands via the hostname in a hypertext link.
1Mnogosearch
1Mnogosearch
Apr 23, 2026
Oct 19, 2007
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in mnoGoSearch before 3.2.43 allows remote attackers to inject arbitrary web script or HTML via the t parameter in search.cgi, as reachable from search.htm-dist.
1Mnogosearch
1Mnogosearch
Apr 16, 2026
Dec 10, 2004
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in mnoGoSearch 3.2.26 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) next and (2) prev result search pages, and the (3) extended...Show more
Multiple cross-site scripting (XSS) vulnerabilities in mnoGoSearch 3.2.26 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) next and (2) prev result search pages, and the (3) extended and (4) simple search forms.Show less
1Mnogosearch
1Mnogosearch
Apr 16, 2026
Nov 23, 2004
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in the UdmDocToTextBuf function in mnoGoSearch 3.2.13 through 3.2.15 could allow remote attackers to execute arbitrary code by indexing a large document.
1Mnogosearch
1Mnogosearch
Apr 16, 2026
Jul 24, 2003
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in search.cgi for mnoGoSearch 3.2.10 allows remote attackers to execute arbitrary code via a long tmplt parameter.
1Mnogosearch
1Mnogosearch
Apr 16, 2026
Jul 24, 2003
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in search.cgi for mnoGoSearch 3.1.20 allows remote attackers to execute arbitrary code via a long ul parameter.
1Mnogosearch
1Mnogosearch
Apr 16, 2026
Aug 12, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in search.cgi in mnoGoSearch 3.1.19 and earlier allows remote attackers to execute arbitrary code via a long query (q) parameter.