CVE-2006-2649

In CosmicShoppingCart, the CosmicShop directory contains multiple XSS vulnerabilities in search.php, search_cat.php, search_price.php, and product_details.php. The flaws allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, demonstrated by the (1) query paramet...

CVE-2004-2649

CVE-2004-2649 affects Eudora 6.1.0.6. The issue enables a remote attacker to obfuscate URLs shown in the status bar by inserting a large number of characters (for example spaces encoded as "&#32") in the middle of the URL, potentially misleading users about the actual link. The provided documents...

CVE-2005-2649

CVE-2005-2649 describes a cross-site scripting (XSS) vulnerability in ATutor 1.5.1 that allows remote attackers to inject arbitrary script or HTML via the parameters course in login.php or words in search.php. The CVE is cited with a base score of 4.3 (Medium) on the NVD entry, and multiple conne...

CVE-2005-2649

Cross-site scripting XSS vulnerability in ATutor 1.5.1 allows remote attackers to inject arbitrary web script or HTML via 1 course parameter in login.php or 2 words parameter in search.php...

CVE-2004-2649

Eudora 6.1.0.6 allows remote attackers to obfuscate URLs displayed in the status bar by inserting a large number of characters e.g. spaces coded as "&32" in the middle of the URL...