2313 matches found
CVE-2005-4546: Undefined Security Weakness
search.php in eggblog 2.0 allows remote attackers to obtain the full path via an invalid q parameter, as used by the Keyword and Search fields, possibly due to an SQL injection vulnerability...
DEBIAN-CVE-2005-3341
DHIS tools DNS package dhis-tools-dns before 5.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files created by 1 register-q.sh and 2 register-p.sh...
CVE-2005-4431: Undefined Security Weakness
SQL injection vulnerability in WowBB 1.65 allows remote attackers to execute arbitrary SQL commands via the q parameter to search.php. NOTE: the viewuser.php/sortby vector is already covered by CVE-2005-1554 and CVE-2004-2181...
CVE-2005-4391
Cross-site scripting XSS vulnerability in damoon allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the q parameter...
CVE-2005-4398: Undefined Security Weakness
NOTE: the vendor has disputed this issue. Cross-site scripting XSS vulnerability in lemoon 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the q parameter. NOTE: the vendor has disputed this issue, saying "Sites are built ...
CVE-2005-4391: Undefined Security Weakness
Cross-site scripting XSS vulnerability in damoon allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the q parameter...
CVE-2005-4205: Undefined Security Weakness
Cross-site scripting XSS vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2005-4091
Cross-site scripting XSS vulnerability in 1search.cgi in 1-Script 1-Search 1.8 allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2005-4091: Undefined Security Weakness
Cross-site scripting XSS vulnerability in 1search.cgi in 1-Script 1-Search 1.8 allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2005-4053
Cross-site scripting XSS vulnerability in coWiki 0.3.4 allows remote attackers to inject arbitrary web script or HTML via the q parameter, as demonstrated using 26.html...
CVE-2005-4059: Undefined Security Weakness
SQL injection vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows remote attackers to execute arbitrary SQL commands via the q parameter...
CVE-2005-4053: Undefined Security Weakness
Cross-site scripting XSS vulnerability in coWiki 0.3.4 allows remote attackers to inject arbitrary web script or HTML via the q parameter, as demonstrated using 26.html...
CVE-2005-4032
Cross-site scripting XSS vulnerability in search.cgi in Easy Search System 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2005-4032: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search.cgi in Easy Search System 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2005-4004: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search.asp in MyTemplateSite 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2005-3966: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search.jsp in Java Search Engine JSE 0.9.34 allows remote attackers to inject arbitrary web script or HTML via the q parameter...
qnews.txt
Language: PHP Script: Q-News Version: 2.0 Official website: http://sourceforge.net/projects/q-news/ Problem: Remote file inclusion Discovered by: GB Description: =========== Q-News is a Quick News generator written in PHP that generates small text files that can be included a site, it has a lot o...
CVE-2005-3859
PHP remote file inclusion vulnerability in q-news.php in Q-News 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter...
CVE-2005-3859
CVE-2005-3859 describes a PHP remote file inclusion vulnerability in q-news.php (Q-News 2.0) that allows an attacker to execute arbitrary PHP code via a URL supplied in the id parameter. Affected software: Q-News 2.0. Root cause: improper handling of the id parameter enabling inclusion of remote ...