CVE-2008-2694

Cross-site scripting XSS vulnerability in search.php in phpInv 0.8.0 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...

CVE-2008-2694

CVE-2008-2694 affects phpInv 0.8.0, with a vulnerability in the search.php keyword parameter that enables cross-site scripting (XSS). The root cause is improper handling of user input in the search functionality, allowing an attacker to inject arbitrary web script or HTML when the keyword paramet...

CVE-2008-2694

creationtimestamp| type| source ---|---|--- 2008-06-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5754...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in BEA WebLogic Server and Express 6.1 through 10.0 MP1 allow remote attackers to inject arbitrary web script or HTML via unspecified samples. NOTE: this might be the same issue as CVE-2007-2694...

CVE-2008-0902

Multiple cross-site scripting XSS vulnerabilities in BEA WebLogic Server and Express 6.1 through 10.0 MP1 allow remote attackers to inject arbitrary web script or HTML via unspecified samples. NOTE: this might be the same issue as CVE-2007-2694...

CVE-2004-2694

CVE-2004-2694 affects Microsoft Outlook Express 6.0. The vulnerability allows remote attackers to bypass access restrictions and load content from arbitrary sources into the Outlook context via a BASE HREF with target set to _top, enabling phishing-like content injection. This is described across...

CVE-2007-2694

CVE-2007-2694 concerns multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Express and WebLogic Server. Affected products span BEA WebLogic Express and WebLogic Server versions 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0 GA, and 9.1 GA. The root cause is improper handli...

CVE-2006-2694

Multiple PHP remote file inclusion vulnerabilities in EzUpload Pro 2.10 allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 form.php, 2 customize.php, and 3 initialize.php...

CVE-2006-2694

CVE-2006-2694 affects EzUpload Pro 2.10 and describes multiple PHP remote file inclusion vulnerabilities. The issue allows remote attackers to execute arbitrary PHP code by providing a URL in the path parameter to any of three scripts: form.php, customize.php, and initialize.php. The underlying r...

CVE-2005-2694

CVE-2005-2694 describes a buffer overflow in WinAce 2.6.0.5 (and possibly earlier versions) that allows remote attackers to execute arbitrary code by processing a temporary .tmp file containing an entry with a long file name. Public records identify this as a remote code execution vulnerability w...

CVE-2004-2694

Microsoft Outlook Express 6.0 allows remote attackers to bypass intended access restrictions, load content from arbitrary sources into the Outlook context, and facilitate phishing attacks via a "BASE HREF" with the target set to "top"...