CVE-2006-0152

This record documents a Cross-site Scripting (XSS) vulnerability in phpChamber 1.2 and earlier, exploitable via the needle parameter in search_result.php. The root cause is an input handling flaw that allows remote attackers to inject arbitrary web script or HTML, as described in the CVE entry. A...

CVE-2006-0152: Undefined Security Weakness

Cross-site scripting XSS in searchresult.php in phpChamber 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the needle parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4001: Undefined Security Weakness

Multiple SQL injection vulnerabilities in phpYellowTM Pro Edition and Lite Edition 5.33 allow remote attackers to execute arbitrary SQL commands via the 1 haystack parameter to searchresult.php or 2 ckey parameter to printme.php...

CVE-2005-3817: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 cid parameter in searchresult.php, 2 sbresid parameter in review.php, 3 cid parameter in browsecats.php, 4 hid parameter in email.php, and...

CVE-2005-2985

SQL injection vulnerability in searchresult.php in AEwebworks aeDating Script 4.0 and earlier allows remote attackers to execute arbitrary SQL statements via the Country parameter...

CVE-2005-2985: Undefined Security Weakness

SQL injection vulnerability in searchresult.php in AEwebworks aeDating Script 4.0 and earlier allows remote attackers to execute arbitrary SQL statements via the Country parameter...

CVE-2005-0907: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to category.php, 2 the id parameter to item.php, 3 the lang parameter to index.php, 4 the searchQuery parameter to searchresult.php, 5 or the...