138 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in Search.php in DiMeMa CONTENTdm CDM allows remote attackers to inject arbitrary web script or HTML via a search, probably related to the CISOBOX1 parameter to results.php in CDM 4.2...
Unfixed XSS vulnerability at finditinyuma.com
Security researcher frosTMaturidi, has submitted on 07/07/2007 a cross-site-scripting XSS vulnerability affecting finditinyuma.com, which at the time of submission ranked 5655498 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2007. It is...
Unfixed XSS vulnerability at www.computingstudents.com
Security researcher frosTMaturidi, has submitted on 07/07/2007 a cross-site-scripting XSS vulnerability affecting www.computingstudents.com, which at the time of submission ranked 2961889 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...
nabopoll-sql.txt
Nabopoll have a bug in some files, for example results.php Line 27...31 -------------------------------- $resquestion = mysqlquery"select from nabopollquestions where survey=$survey order by id"; if $resquestion == FALSE || mysqlnumrows$resquestion == 0 error$rowsurvey, "questions not found";...
Nabopoll Blind SQL Injection vulnerabilies
Nabopoll have a bug in some files, for example results.php Line 27...31 -------------------------------- $resquestion = mysqlquery"select from nabopollquestions where survey=$survey order by id"; if $resquestion == FALSE || mysqlnumrows$resquestion == 0 error$rowsurvey, "questions not found";...
fcCMS10-xss.txt
Fix & Chips CMS v1.0 http://software.fixnchipsit.com/ Vulnerable files: staff.php delete-announce.php new-customer.php search.php client-results.php -------------------------------------------- staff.php XSS User input in the Announcement box isn't properly sanatized before being generated. A few...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Fix and Chips CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter in a delete-announce.php; the 2 Announcement form field in b staff.php; the 3 Client Name, 4 Business Name, 5 Street, 6 Address 2, 7...
CVE-2007-0146
Multiple cross-site scripting XSS vulnerabilities in Fix and Chips CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter in a delete-announce.php; the 2 Announcement form field in b staff.php; the 3 Client Name, 4 Business Name, 5 Street, 6 Address 2, 7...
CVE-2006-1217: Undefined Security Weakness
SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL commands via the pollid parameter to 1 results.php, 2 topolls.php, 3 pollit.php...
CVE-2006-0521: Undefined Security Weakness
Cross-site scripting XSS vulnerability in results.php in BrowserCRM allows remote attackers to inject arbitrary web script or HTML via certain manipulations of the query parameter, as demonstrated using an IMG SRC tag...
BrowserCRM - Results.PHP Cross-Site Scripting Vulnerability
BrowserCRM 0 Results.PHP Cross-Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/16435/info BrowserCRM is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input...
CVE-2005-3743
SQL injection vulnerability in results.php in SimplePoll allows remote attackers to execute arbitrary SQL commands via the pollid parameter...
CVE-2005-3743
SQL injection vulnerability in SimplePoll’s results.php allows remote attackers to execute arbitrary SQL commands via the pollid parameter. The issue affects the poll results handling and is described with a CVSSv2 base score of 7.5 (HIGH). Exploitation details, affected versions, and remediation...
CVE-2005-3743
SQL injection vulnerability in results.php in SimplePoll allows remote attackers to execute arbitrary SQL commands via the pollid parameter...
CVE-2005-3743: Undefined Security Weakness
SQL injection vulnerability in results.php in SimplePoll allows remote attackers to execute arbitrary SQL commands via the pollid parameter...
SimplePoll - results.php SQL Injection
SimplePoll - results.php SQL Injection source: https://www.securityfocus.com/bid/15508/info SimplePoll is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...
CVE-2005-2324
Cross-site scripting XSS vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the searchtype or searchterm parameters to 1 results.php or 2 categorysearch.php...
CVE-2005-2324: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the searchtype or searchterm parameters to 1 results.php or 2 categorysearch.php...