CVE-2008-6013

Multiple SQL injection vulnerabilities in Freeway before 1.4.3.210 allow remote attackers to execute arbitrary SQL commands via unspecified vectors involving the 1 advanced search result and 2 service resource pages...

Sql injection

Multiple SQL injection vulnerabilities in Freeway before 1.4.3.210 allow remote attackers to execute arbitrary SQL commands via unspecified vectors involving the 1 advanced search result and 2 service resource pages...

CVE-2008-6013: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Freeway before 1.4.3.210 allow remote attackers to execute arbitrary SQL commands via unspecified vectors involving the 1 advanced search result and 2 service resource pages...

CVE-2008-4637

Cross-site scripting XSS vulnerability in cpCommerce before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors in the advanced search feature. NOTE: this is probably a variant of CVE-2008-4121...

Cross site scripting

Cross-site scripting XSS vulnerability in cpCommerce before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors in the advanced search feature. NOTE: this is probably a variant of CVE-2008-4121...

CVE-2008-4637

Cross-site scripting XSS vulnerability in cpCommerce before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors in the advanced search feature. NOTE: this is probably a variant of CVE-2008-4121...

CVE-2008-4637: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cpCommerce before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors in the advanced search feature. NOTE: this is probably a variant of CVE-2008-4121...

Sql injection

SQL injection vulnerability in advancedsearchresults.php in Vastal I-Tech Dating Zone, possibly 0.9.9, allows remote attackers to execute arbitrary SQL commands via the fage parameter...

Vastal I-Tech Dating Zone (fage) SQL Injection Vulnerability

No description provided by source. ZoRLu - - - yildirimordulari.org - - - z0rlu.blogspot.com Vastal I-Tech Dating Zone fage SQL Injection Vulnerability author: ZoRLu home: yildirimordulari.org - - - z0rlu.blogspot.com - - - r00tsecurity.org contact: [email protected] & [email protected] baska msn yok...

Unfixed XSS vulnerability at www.boatsdepot.org

Security researcher mckt, has submitted on 16/08/2008 a cross-site-scripting XSS vulnerability affecting www.boatsdepot.org, which at the time of submission ranked 427559 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/08/2008. It is current...

Cross site scripting

Cross-site scripting XSS vulnerability in the advanced search mechanism webapps/search/advanced.jsp in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the next parameter...

CVE-2008-2518

Cross-site scripting XSS vulnerability in the advanced search mechanism webapps/search/advanced.jsp in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the next parameter...

Unfixed XSS vulnerability at www.cora.de

Security researcher Fabian Fingerle, has submitted on 01/07/2008 a cross-site-scripting XSS vulnerability affecting www.cora.de, which at the time of submission ranked 371332 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2008. It is...

CVE-2007-5943

Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...

Code injection

Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...

CVE-2007-5943

Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...

CVE-2007-5943: Undefined Security Weakness

Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...

CVE-2007-5932

Multiple cross-site scripting XSS vulnerabilities in Fatwire Content Server CS CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the 1 search function, 2 advanced search function, and possibly other components...

CVE-2007-5932

Multiple cross-site scripting XSS vulnerabilities in Fatwire Content Server CS CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the 1 search function, 2 advanced search function, and possibly other components...

CVE-2007-5932: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Fatwire Content Server CS CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the 1 search function, 2 advanced search function, and possibly other components...