Cross site scripting

Cross-site scripting XSS vulnerability in advancedsearchresult.php in xt:Commerce 3.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

PT-2009-1519 · Xt · Xt:Commerce

Name of the Vulnerable Software and Affected Versions: xt:Commerce versions 3.0.4 and earlier Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in the advanced...

CVE-2008-6013

Multiple SQL injection vulnerabilities in Freeway before 1.4.3.210 allow remote attackers to execute arbitrary SQL commands via unspecified vectors involving the 1 advanced search result and 2 service resource pages...

Sql injection

Multiple SQL injection vulnerabilities in Freeway before 1.4.3.210 allow remote attackers to execute arbitrary SQL commands via unspecified vectors involving the 1 advanced search result and 2 service resource pages...

CVE-2008-4637

Cross-site scripting XSS vulnerability in cpCommerce before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors in the advanced search feature. NOTE: this is probably a variant of CVE-2008-4121...

Cross site scripting

Cross-site scripting XSS vulnerability in cpCommerce before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors in the advanced search feature. NOTE: this is probably a variant of CVE-2008-4121...

CVE-2008-4637

Cross-site scripting XSS vulnerability in cpCommerce before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors in the advanced search feature. NOTE: this is probably a variant of CVE-2008-4121...

Sql injection

SQL injection vulnerability in advancedsearchresults.php in Vastal I-Tech Dating Zone, possibly 0.9.9, allows remote attackers to execute arbitrary SQL commands via the fage parameter...

Vastal I-Tech Dating Zone (fage) SQL Injection Vulnerability

No description provided by source. ZoRLu - - - yildirimordulari.org - - - z0rlu.blogspot.com Vastal I-Tech Dating Zone fage SQL Injection Vulnerability author: ZoRLu home: yildirimordulari.org - - - z0rlu.blogspot.com - - - r00tsecurity.org contact: [email protected] & [email protected] baska msn yok...

Unfixed XSS vulnerability at www.boatsdepot.org

Security researcher mckt, has submitted on 16/08/2008 a cross-site-scripting XSS vulnerability affecting www.boatsdepot.org, which at the time of submission ranked 427559 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/08/2008. It is current...

Cross site scripting

Cross-site scripting XSS vulnerability in the advanced search mechanism webapps/search/advanced.jsp in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the next parameter...

CVE-2008-2518

Cross-site scripting XSS vulnerability in the advanced search mechanism webapps/search/advanced.jsp in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the next parameter...

Unfixed XSS vulnerability at www.cora.de

Security researcher Fabian Fingerle, has submitted on 01/07/2008 a cross-site-scripting XSS vulnerability affecting www.cora.de, which at the time of submission ranked 371332 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2008. It is...

CVE-2007-5943

Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...

Code injection

Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...

CVE-2007-5943

Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...

CVE-2007-5932

Multiple cross-site scripting XSS vulnerabilities in Fatwire Content Server CS CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the 1 search function, 2 advanced search function, and possibly other components...

CVE-2007-5932

Multiple cross-site scripting XSS vulnerabilities in Fatwire Content Server CS CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the 1 search function, 2 advanced search function, and possibly other components...

Sql injection

SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents via 1 the ofinterest parameter in a light search query, 2 description parameter in the advanced search query, and possibly other vectors...

Buffer overflow

Buffer overflow in the Advanced Search Finder.exe feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted Outlook Saved Searches OSS file that triggers memory corruption, aka "Microsoft Outlook Advanced Find Vulnerability."...