CVE-2006-0122

Cross-site scripting XSS vulnerability in Public/Index.asp in Aquifer CMS allows remote attackers to inject arbitrary web script or HTML via the Keyword parameter...

CVE-2005-4571

Cross-site scripting XSS vulnerability in myEZshop Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the Keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4571

Cross-site scripting XSS vulnerability in myEZshop Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the Keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4571

The provided documents confirm a Cross-site scripting (XSS) vulnerability in the myEZshop Shopping Cart . The issue allows remote attackers to inject arbitrary web script or HTML via the Keyword parameter. No explicit root cause or vulnerable version is stated in the sources; the impact is limite...

CVE-2005-4547

Cross-site scripting XSS vulnerability in home/search.php in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the q parameter, as used by the Keyword and Search fields...

CVE-2005-4420

Cross-site scripting XSS vulnerability in Honeycomb Archive Enterprise 3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the keyword parameter in search.cfm...

CVE-2005-4036

Cross-site scripting XSS vulnerability in index.cgi in Web4Future KeyWord Frequency Counter 1.0 allows remote attackers to inject arbitrary web script or HTML via the "remote URL."...

CVE-2005-4036

CVE-2005-4036 is a cross-site scripting (XSS) vulnerability in Web4Future Keyword Frequency Counter 1.0, exploitable via the remote URL parameter sent to index.cgi. The NVD summary states an attacker can inject arbitrary script/HTML, impacting integrity (partial) but with no confidentiality or av...

CVE-2005-2063

Multiple cross-site scripting XSS vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 Title parameter to sendpassword.asp or 2 Keyword field in search.asp...

CVE-2005-2063

Multiple cross-site scripting XSS vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 Title parameter to sendpassword.asp or 2 Keyword field in search.asp...

CVE-2005-0995

Multiple cross-site scripting XSS vulnerabilities in ProductCart 2.7 allow remote attackers to inject arbitrary web script or HTML via 1 the keyword parameter to advSearchh.asp, 2 the redirectUrl parameter to NewCust.asp, 3 the country parameter to storelocatorsubmit.asp, or 4 the error parameter...

CVE-2005-0924

Cross-site scripting XSS vulnerability in Adventia E-Data 2.0 allows remote attackers to inject arbitrary web script or HTML via a query keyword...

CVE-2005-0924

Cross-site scripting XSS vulnerability in Adventia E-Data 2.0 allows remote attackers to inject arbitrary web script or HTML via a query keyword...

CVE-2005-0924

CVE-2005-0924 describes a cross-site scripting (XSS) vulnerability in Adventia E-Data 2.0. The issue allows remote attackers to inject arbitrary web script or HTML via a query keyword in the web interface. Documented impact is limited to partial integrity impact and does not indicate exploitation...

CVE-2004-1633

processbug.cgi in Bugzilla 2.9 through 2.18rc2 and 2.19 from CVS does not check edit permissions on the keywords field, which allows remote authenticated users to modify the keywords in a bug via the keywordaction parameter...

sBLOG <= 0.7.2 search.php keyword Parameter SQL Injection

Binary data 3528.prm...

Netgear RP114 URL filter fails if URL is too long

Hi! Netgear has some small router and firewalling devices for home users and small companies SOHO. Most of these solutions are able to do a simple keyword based URL filtering. Lets say we don't want users to visit http://www.scip.ch so we create a filter for the keyword "scip.ch". If a user wants...

CVE-2001-0865

Cisco 12000 Series Routers (IOS 12.0) with Engine 2 line cards are affected by CVE-2001-0865. The issue is that the outgoing ACL implementation does not support the fragment keyword, potentially allowing fragmented packets to bypass the ACL as configured (violation of intended access). The descri...

CVE-1999-1466

The CVE-1999-1466 entry concerns Cisco routers (versions 8.2–9.1) where remote attackers can bypass ACLs when extended IP access lists are configured on certain interfaces with the IP route cache enabled and the access list uses the established keyword. The provided sources confirm the vulnerabil...

FreeBSD-SA-01:08.ipfw

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:08 Security Advisory FreeBSD, Inc. Topic: ipfw/ip6fw allows bypassing of 'established' keyword Category: core Module: kernel Announced: 2001-01-23 Credits: Aragon Gouveia...