CVE-2005-1135

Cross-site scripting XSS vulnerability in search.php for Simple PHP Blog sphpBlog 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2005-1135: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.php for Simple PHP Blog sphpBlog 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2004-2108

Multiple SQL injection vulnerabilities in QuadComm Q-Shop allow remote attackers to execute arbitrary SQL commands via certain parameters to 1 search.asp, 2 browse.asp, 3 details.asp, 4 showcat.asp, 5 users.asp, 6 addtomylist.asp, 7 modline.asp, 8 cart.asp, or 9 newuser.asp...

CVE-2004-2109

Multiple cross-site scripting XSS vulnerabilities in 1 imagezoom.asp or 2 recommend.asp in Q-Shop allow remote attackers to execute arbitrary script and steal the user session ID via Javascript in a URL...

Fedora Core 1 : ethereal-0.10.0a-0.1 (2003-040)

Serious issues have been discovered in the following protocol dissectors : - Selecting 'Match-Selected' or 'Prepare-Selected' for a malformed SMB packet could cause a segmentation fault. - It is possible for the Q.931 dissector to dereference a NULL pointer when reading a malformed packet. Impact...

[Full-Disclosure] QuadComm Q-Shop ASP Shopping Cart Software multiple security vulnerabilities

S-Quadra Advisory 2004-01-23 Topic: QuadComm Q-Shop ASP Shopping Cart Software multiple security vulnerabilities Severity: High Vendor URL: http://www.quadcomm.com Advisory URL: http://www.s-quadra.com/advisories/Adv-20040123.txt Release date: 23 Jan 2004 1. DESCRIPTION Q-Shop is a shopping cart...

CVE-2003-1536

Multiple cross-site scripting XSS vulnerabilities in Codeworx Technologies DCP-Portal 5.3.1 allow remote attackers to inject arbitrary web script or HTML via 1 the q parameter to search.php and 2 the year parameter to calendar.php...

CVE-2003-1013

The CVE-2003-1013 issue affects Ethereal/tethereal prior to version 0.10.0, where the Q.931 dissector could be exploited to crash the application via a malformed Q.931 packet, triggering a null dereference and resulting in denial of service. This vulnerability is documented across multiple adviso...

CVE-2003-1013

The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service crash via a malformed Q.931, which triggers a null dereference...

PT-2003-2007 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions prior to 0.10.0 Tethereal affected versions not specified Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, via a malformed Q.931 that triggers a null dereference...

CVE-2003-1013: NULL Pointer Dereference

The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service crash via a malformed Q.931, which triggers a null dereference...

CVE-2002-0789: Undefined Security Weakness

Buffer overflow in search.cgi in mnoGoSearch 3.1.19 and earlier allows remote attackers to execute arbitrary code via a long query q parameter...

CVE-2001-0387: Undefined Security Weakness

Format string vulnerability in hfaxd in HylaFAX before 4.1.b22 allows local users to gain privileges via the -q command line argument...