Skip to content
OpenAdvisories

Vendor

benbusby

4 known vulnerabilities.

Products

whoogle-search 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-22417

    Whoogle Search Cross-site Scripting vulnerability

    Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the `element` method in `app/routes.py` does not validate the user-controlled `src_type` and `element_url` variables and passes them to the `send` method which sends a `GET` reque…

    benbusby whoogle-search whoogle-search PyPI
  • Medium 5.3
    CVE-2024-22204

    Whoogle Search Limited File Write vulnerability

    Whoogle Search is a self-hosted metasearch engine. Versions 0.8.3 and prior have a limited file write vulnerability when the configuration options in Whoogle are enabled. The `config` function in `app/routes.py` does not validate the user-controlled `name` va…

    benbusby whoogle-search whoogle-search PyPI