452 matches found
CVE-2009-0026: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to 1 search.jsp or 2 swr.jsp...
CVE-2008-5172: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Yazd Forum Software 3.x allow remote attackers to inject arbitrary web script or HTML via the 1 q parameter to a search.jsp, and the 2 msg parameter to b error.jsp and c userAccount.jsp. NOTE: the provenance of this information is unknown; the...
CVE-2008-5067: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.php in Kmita Catalogue 2.x allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-4438: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.php in Datafeed Studio 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
PYSEC-2008-4
Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function...
DEBIAN-CVE-2008-2951
Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function...
CVE-2008-2951: URL Redirection to Untrusted Site
Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function...
CVE-2008-2668: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in yBlog 0.2.2.2 allow remote attackers to inject arbitrary web script or HTML via 1 the q parameter to search.php, or the n parameter to 2 user.php or 3 uss.php...
CVE-2008-2531: Cross-Site Request Forgery (CSRF)
Cross-site scripting XSS vulnerability in the search script in Build A Niche Store BANS 3.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2008-2460: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in faq.php in vBulletin 3.7.0 Gold allows remote attackers to execute arbitrary SQL commands via the q parameter in a search action...
CVE-2008-2186: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in Chilek Content Management System aka ChiCoMaS 2.0.4 allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2008-2126: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Tux CMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 q parameter to index.php and the 2 returnURL parameter to tux-login.php...
CVE-2008-1653: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in Sava's Link Manager 2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...
CVE-2008-1458: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in CS-Cart 1.3.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a products search action. NOTE: it was also reported that 1.3.5-SP2 trial edition is also affected...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO or 2 the q parameter in an about action to the help system...
CVE-2008-1347
Multiple cross-site scripting XSS vulnerabilities in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO or 2 the q parameter in an about action to the help system...
CVE-2008-1347: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO or 2 the q parameter in an about action to the help system...
Cross site scripting
Cross-site scripting XSS vulnerability in images.php in the Red Mexico RMSOFT Gallery System GS 2.0 module aka rmgs for XOOPS allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2008-1064: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in images.php in the Red Mexico RMSOFT Gallery System GS 2.0 module aka rmgs for XOOPS allows remote attackers to inject arbitrary web script or HTML via the q parameter...