CVE-2003-1498

CVE-2003-1498 is an XSS vulnerability in WRENSOFT Zoom Search Engine, affecting version 2.0 Build 1018 and earlier. The vulnerability arises from improper handling of the zoom_query parameter in search.php, allowing remote attackers to inject arbitrary web script or HTML. The available documents ...

Unfixed XSS vulnerability at www.kde-files.org

Security researcher S0m.Ph, has submitted on 25/10/2007 a cross-site-scripting XSS vulnerability affecting www.kde-files.org, which at the time of submission ranked 416012 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...

CVE-2003-1498: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php for WRENSOFT Zoom Search Engine 2.0 Build 1018 and earlier allows remote attackers to inject arbitrary web script or HTML via the zoomquery parameter...

CVE-2007-5646: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Sources/Search.php in Simple Machines Forum SMF 1.1.3, when MySQL 5 is used, allows remote attackers to execute arbitrary SQL commands via the userspec parameter in a search2 action to index.php...

CVE-2002-2255

The CVE-2002-2255 entry describes an XSS vulnerability in phpBB 2.0.3 and possibly earlier versions. The issue enables remote attackers to inject arbitrary web script or HTML via the search_username parameter in the searchuser mode, potentially compromising user sessions or data integrity. Accord...

CVE-2002-2255: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in phpBB 2.0.3 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via the searchusername parameter in searchuser mode...

CVE-2007-5261: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to categorydetail.php and the 2 ddlCategory parameter to search.php...

CVE-2004-2725: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web script or HTML via 1 the search parameter in a search.php, 2 the email parameter in b subscribe.php, and 3 the return and 4 title parameters in c forum2.php...

MultiCart 1.0 Remote Blind SQL Injection Exploit

No description provided by source. Indonesian Newhack Security Advisory ------------------------------------ MultiCart 1.0 Remote Blind SQL Injection Waktu : Sep 30 2007 02:00AM Software : MultiCart 1.0 Vendor : http://www.iscripts.com/multicart/ Ditemukan oleh : k1tk4t | http://newhack.org Lokas...

multicart-sql.txt

Indonesian Newhack Security Advisory ------------------------------------ MultiCart 1.0 Remote Blind SQL Injection Waktu : Sep 30 2007 02:00AM Software : MultiCart 1.0 Vendor : http://www.iscripts.com/multicart/ Ditemukan oleh : k1tk4t | http://newhack.org Lokasi : Indonesia ----...

MultiCart 1.0 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================ MultiCart 1.0 Remote Blind SQL Injection Exploit ================================================ Indonesian Newhack Security Advisory ------------------------------------ MultiCart 1.0 Remo...

MultiCart 1.0 Remote Blind SQL Injection Exploit

No description provided by source. Indonesian Newhack Security Advisory ------------------------------------ MultiCart 1.0 Remote Blind SQL Injection Waktu : Sep 30 2007 02:00AM Software : MultiCart 1.0 Vendor : http://www.iscripts.com/multicart/ Ditemukan oleh : k1tk4t | http://newhack.org Lokas...

MultiCart 1.0 - Blind SQL Injection

Indonesian Newhack Security Advisory ------------------------------------ MultiCart 1.0 Remote Blind SQL Injection Waktu : Sep 30 2007 02:00AM Software : MultiCart 1.0 Vendor : http://www.iscripts.com/multicart/ Ditemukan oleh : k1tk4t | http://newhack.org Lokasi : Indonesia ----...

CVE-2007-5141: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in search.php in SiteX CMS 0.7.3 Beta allows remote attackers to execute arbitrary SQL commands via the search parameter...

CVE-2007-5054: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the gsLanguage parameter to 1 search/search.php, 2 poll/inlinepoll.php, 3 poll/showpoll.php, 4 links/showlinks.php, or 5 links/submitlinks.php in...

Unfixed XSS vulnerability at www.axsys.com

Security researcher WhatALegend, has submitted on 20/09/2007 a cross-site-scripting XSS vulnerability affecting www.axsys.com, which at the time of submission ranked 1542276 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Unfixed XSS vulnerability at www.cvwd.org

Security researcher xeno3dx, has submitted on 19/09/2007 a cross-site-scripting XSS vulnerability affecting www.cvwd.org, which at the time of submission ranked 3650508 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2007. It is currently...

Unfixed XSS vulnerability at 1-look.org

Security researcher www.r3t.n3t.nl, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting 1-look.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/09/2007. It is currently...

Unfixed XSS vulnerability at srash.com

Security researcher kusomiso.com, has submitted on 16/09/2007 a cross-site-scripting XSS vulnerability affecting srash.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently...

Unfixed XSS vulnerability at www.bb-chat.tv

Security researcher kusomiso.com, has submitted on 13/09/2007 a cross-site-scripting XSS vulnerability affecting www.bb-chat.tv, which at the time of submission ranked 30655 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is...