CVE-2006-4255: Undefined Security Weakness

Cross-site scripting XSS vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3 allows remote attackers to include arbitrary web script or HTML via multiple unspecified vectors related to folder names, as injected into the vfolderlabel form field in the IMP search screen...

CVE-2006-3955: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 news.php, 2 search.php, or 3 whosOnline.php...

CVE-2006-3576: Undefined Security Weakness

SQL injection vulnerability in search.php in SenseSites CommonSense CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the Date parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

newangels-11.txt

newangels-team.eu 11 FreeWebshop - Cross Site Scripting & SQL Injection Vulnerabilities =========================================================================================== Vendor site = http://www.sensesites.com/ Date: Jun 13 2006 Risk = MEDIUM Version: 5.0 Credit: ======= NewAngels Team ...

CVE-2006-3474: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to a gbrowse.php, 2 cardid parameter to b rating.php and c create.php, and the 3 eventid parameter to d search.php...

freewebshop21.txt

NewAngels Advisory 9 FreeWebshop - Cross Site Scripting & SQL Injection Vulnerabilities ========================================================================================== Vendor site = http://www.freewebshop.org/ Date: Jun 15 2006 Version: 2.1 Credit: ======= NewAngels Team...

CVE-2006-3377

Cross-site scripting XSS vulnerability in JMB Software AutoRank PHP 3.02 and earlier, and AutoRank Pro 5.01 and earlier, allows remote attackers to inject arbitrary web script or HTML via the 1 Keyword parameter in search.php and the 2 Username parameter in main.cgi...

CVE-2006-3382

Cross-site scripting XSS vulnerability in search.php in mAds 1.0 allows remote attackers to inject arbitrary web script or HTML via the "search string"...

CVE-2006-3382

Cross-site scripting XSS vulnerability in search.php in mAds 1.0 allows remote attackers to inject arbitrary web script or HTML via the "search string"...

CVE-2006-3382

CVE-2006-3382 is a cross-site scripting (XSS) vulnerability in the search.php component of mAds 1.0 , exploitable via the search string parameter. According to the records, remote attackers can inject arbitrary web script or HTML. The NVD metrics indicate a Medium base score (4.3) with network at...

CVE-2006-3377: Undefined Security Weakness

Cross-site scripting XSS vulnerability in JMB Software AutoRank PHP 3.02 and earlier, and AutoRank Pro 5.01 and earlier, allows remote attackers to inject arbitrary web script or HTML via the 1 Keyword parameter in search.php and the 2 Username parameter in main.cgi...

CVE-2006-3382: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.php in mAds 1.0 allows remote attackers to inject arbitrary web script or HTML via the "search string"...

CVE-2006-3329

The CVE-2006-3329 entry concerns a SQL injection in search.php of PHP/MySQL Classifieds (PHP Classifieds). The vulnerability is exploitable via the rate parameter, potentially affecting data confidentiality, integrity, and availability as indicated by CVSS v2 base metrics (AV:N/AC:L/Au:N/C:P/I:P/...

CVE-2006-3329: Undefined Security Weakness

SQL injection vulnerability in search.php in PHP/MySQL Classifieds PHP Classifieds allows remote attackers to execute arbitrary SQL commands via the rate parameter...

CVE-2006-3283

SQL injection vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to execute arbitrary SQL commands via the 1 pid parameter in picture.php, 2 mid parameter in mem.php, and the 3 sex and 4 relationship parameters in search.php...

CVE-2006-3283

SQL injection vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to execute arbitrary SQL commands via the 1 pid parameter in picture.php, 2 mid parameter in mem.php, and the 3 sex and 4 relationship parameters in search.php...

CVE-2006-3284

CVE-2006-3284 describes an XSS vulnerability in Dating Agent PRO 4.7.1. Affected component: login parameter in webmaster/index.php and search.php, enabling injection of arbitrary web script/HTML. The NVD entry records CVSSv2 base score 2.6 (LOW) with network attack, high complexity, no authentica...

CVE-2006-3283: Undefined Security Weakness

SQL injection vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to execute arbitrary SQL commands via the 1 pid parameter in picture.php, 2 mid parameter in mem.php, and the 3 sex and 4 relationship parameters in search.php...

CVE-2006-3284: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to inject arbitrary web script or HTML via the login parameter in 1 webmaster/index.php and 2 search.php...

CVE-2006-3259

Multiple cross-site scripting XSS vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script or HTML via the 1 ep parameter to search.php and the 2 subject parameter in comment.php aka the Subject field when posting a comment...