CVE-2007-1515: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Horde IMP H3 4.1.3, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via 1 the email Subject header in thread.php, 2 the editquery parameter in search.php, or other unspecified parameters in search.php. NOTE:...

Sql injection

SQL injection vulnerability in search.php in PHP Labs JobSitePro 1.0 allows remote attackers to execute arbitrary SQL commands via the salary parameter...

CVE-2007-1428

SQL injection vulnerability in search.php in PHP Labs JobSitePro 1.0 allows remote attackers to execute arbitrary SQL commands via the salary parameter...

CVE-2007-1428: Undefined Security Weakness

SQL injection vulnerability in search.php in PHP Labs JobSitePro 1.0 allows remote attackers to execute arbitrary SQL commands via the salary parameter...

JobSitePro 1.0 (search.php) Remote SQL Injection Exploit

No description provided by source. //Coded by ajann //'=============================================================================================== //'Script Name: JobSitePro 1.0 search.php Remote BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajann //'Contact : : //'S.Page :...

JobSitePro 1.0 - search.php SQL Injection

JobSitePro 1.0 - search.php SQL Injection //Coded by ajann //'=============================================================================================== //'Script Name: JobSitePro 1.0 search.php Remote BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajann //'Contact : : //'S.Page...

JobSitePro 1.0 - 'search.php' SQL Injection

//Coded by ajann //'=============================================================================================== //'Script Name: JobSitePro 1.0 search.php Remote BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajann //'Contact : : //'S.Page : http://phplabs.com/ //'$$ : 39.95 $...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Phpwebgallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 login or 2 mailaddress field in Register.php, or the 3 searchauthor, 4 mode, 5 startyear, 6 endyear, or 7 datetype field in Search.php, a different...

CVE-2007-1109: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Phpwebgallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 login or 2 mailaddress field in Register.php, or the 3 searchauthor, 4 mode, 5 startyear, 6 endyear, or 7 datetype field in Search.php, a different...

CVE-2006-7057

Technical details (affected versions, root cause nuances, and remediation) are not provided in the supplied connected documents. Monitor for updates from official advisories.

CVE-2006-7057: Undefined Security Weakness

SQL injection vulnerability in search.php in Sphider before 1.3.1c allows remote attackers to execute arbitrary SQL commands via the category parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this issue might be...

Unfixed XSS vulnerability at www.bilinmeyen.com

Security researcher amele2, has submitted on 15/02/2007 a cross-site-scripting XSS vulnerability affecting www.bilinmeyen.com, which at the time of submission ranked 320097 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/02/2007. It is...

Calendar Express - search.php Cross-Site Scripting

Calendar Express - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/22578/info Calendar Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrar...

ipb search.php vulnerability analysis and thinking-vulnerability warning-the black bar safety net

ipb search.php vulnerability analysis and thinking A vulnerability model may unearth a batch of vulnerabilities Idea is the most important pregreplace+/e Author: SuperHeiAtph4nt0m.org Blog: http://superhei.blogbus.com/ Team: http://www.ph4nt0m.org Data: 2006-04-27 Simple analysis The vulnerabilit...

Sql injection

SQL injection vulnerability in i-search.php in Michelle's L2J Dropcalc 4 and earlier allows remote authenticated users to execute arbitrary SQL commands via the itemid parameter...

CVE-2007-0687

CVE-2007-0687 describes an SQL injection in i-search.php of Michelle's L2J Dropcalc 4 and earlier. The vulnerability allows remote authenticated users to inject arbitrary SQL via the itemid parameter, potentially impacting data confidentiality and integrity. Affected software: Michelle's L2J Drop...

CVE-2007-0687: Undefined Security Weakness

SQL injection vulnerability in i-search.php in Michelle's L2J Dropcalc 4 and earlier allows remote authenticated users to execute arbitrary SQL commands via the itemid parameter...

CVE-2007-0550

The CVE-2007-0550 entry concerns a Cross-Site Scripting (XSS) vulnerability in the search.php component of 212cafeBoard 0.08 Beta. The flaw allows remote attackers to inject arbitrary web script or HTML via the keyword parameter, as documented by the NVD entry with CVSS 2.0 base score 6.8 (Medium...

CVE-2007-0550: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.php in 212cafeBoard 0.08 Beta allows remote attackers to inject arbitrary web script or HTML via keyword parameter...

CVE-2007-0477: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Openads 2.0.x before 2.0.10, 2.3 before 2.3.31 aka Max Media Manager before 0.3.31-alpha-pr2, and phpAdsNew/phpPgAds before 2.0.9-pr1 allows remote attackers to inject arbitrary web script or HTML via 1 the keyword parameter in admin-search.php and 2...