Sql injection

Multiple SQL injection vulnerabilities in SaralBlog 1.0 allow remote attackers to execute arbitrary SQL commands via the search parameter to search.php. NOTE: the id/viewprofile.php issue is already covered by CVE-2005-4058...

CVE-2006-0334

Cross-site scripting XSS vulnerability in search.php in My Amazon Store Manager 1.0 allows remote attackers to inject arbitrary web script or HTML via the Keywords parameter. NOTE: some sources claim that the affected parameter is "q", but the only public archive of the original researcher...

dcpXSS.txt

NightWarrior nightwarrior771athotmail.com DCP Portal Cross-Site Scripting Vulnerability http://www.dcp-portal.org http://vicktimhost/calendar.php?show=fullmonth&s=1&submit=GO&day=XSS http://vicktimhost/search.php post this code alert'nightwarrior';...

CVE-2006-0334

CVE-2006-0334 describes a reflected cross-site scripting (XSS) vulnerability in the search.php of My Amazon Store Manager 1.0. The issue enables an attacker to inject arbitrary web script or HTML by supplying crafted input via the Keywords parameter (note: some sources reference parameter q, but ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 p and 2 keyword parameters in a index.php and b search.php...

CVE-2006-0101

Multiple cross-site scripting XSS vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 p and 2 keyword parameters in a index.php and b search.php...

CVE-2006-0101

Multiple cross-site scripting XSS vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 p and 2 keyword parameters in a index.php and b search.php...

CVE-2006-0068

SQL injection vulnerability in Primo Cart 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 q parameter to search.php and 2 email parameter to user.php...

Sql injection

SQL injection vulnerability in Primo Cart 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 q parameter to search.php and 2 email parameter to user.php...

CVE-2006-0068

SQL injection vulnerability in Primo Cart 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 q parameter to search.php and 2 email parameter to user.php...

CVE-2005-4642

Multiple cross-site scripting XSS vulnerabilities in HydroBB 1.0.0 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to 1 search.php, 2 members.php, 3 stats.php, 4 viewforum.php, 5 register.php, 6 usercp.php, 7 groups.php, 8 pms.php, and 9 calendar.php...

CVE-2005-4546

search.php in eggblog 2.0 allows remote attackers to obtain the full path via an invalid q parameter, as used by the Keyword and Search fields, possibly due to an SQL injection vulnerability...

CVE-2005-4546

CVE-2005-4546 affects eggblog 2.0: the search.php module exposes the server full path to remote attackers via an invalid q parameter, with the description suggesting a possible SQL injection trigger. The concrete impact stated is path disclosure; no additional exploit details are provided in the ...

CVE-2005-4547

The vulnerability is a Cross-site Scripting (XSS) issue in eggblog 2.0, specifically in home/search.php, where the q parameter used by Keyword and Search fields can allow remote attackers to execute arbitrary SQL commands. The description notes XSS as the vulnerability type but the impact is stat...

CVE-2005-4236

Cross-site scripting XSS vulnerability in search.php in CKGOLD allows remote attackers to inject arbitrary web script or HTML via the search parameters...

CVE-2005-4236

Cross-site scripting XSS vulnerability in search.php in CKGOLD allows remote attackers to inject arbitrary web script or HTML via the search parameters...

CVE-2005-4240

Vulnerability details (CVE-2005-4240): Affected software is VCD-db 0.98 and earlier. The issue is an SQL injection in search.php via the by parameter, allowing remote attackers to execute arbitrary SQL commands. Impact is stated as partial confidentiality/integrity/availability (per CVSS), with n...

CVE-2005-4236

CVE-2005-4236 concerns an XSS vulnerability in the CKGOLD package, specifically in the search.php component. The issue allows remote attackers to inject arbitrary web script or HTML through the search parameters, enabling cross-site scripting. The available connected records confirm the flaw as a...

CVE-2005-4245

Cross-site scripting XSS vulnerability in search.php in Snipe Gallery 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...

CVE-2005-4245

CVE-2005-4245 is a cross-site scripting (XSS) vulnerability in Snipe Gallery 3.1.4 and earlier affecting the file search.php . The issue arises from the keyword parameter, allowing remote attackers to inject arbitrary web script or HTML. According to the record, the impact is confidentiality: non...