CVE-2005-4391

Cross-site scripting XSS vulnerability in damoon allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the q parameter...

CVE-2005-4391: Undefined Security Weakness

Cross-site scripting XSS vulnerability in damoon allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the q parameter...

CVE-2005-4398: Undefined Security Weakness

NOTE: the vendor has disputed this issue. Cross-site scripting XSS vulnerability in lemoon 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the q parameter. NOTE: the vendor has disputed this issue, saying "Sites are built ...

CVE-2005-4205: Undefined Security Weakness

Cross-site scripting XSS vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2005-4091

Cross-site scripting XSS vulnerability in 1search.cgi in 1-Script 1-Search 1.8 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2005-4091: Undefined Security Weakness

Cross-site scripting XSS vulnerability in 1search.cgi in 1-Script 1-Search 1.8 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2005-4053

Cross-site scripting XSS vulnerability in coWiki 0.3.4 allows remote attackers to inject arbitrary web script or HTML via the q parameter, as demonstrated using 26.html...

CVE-2005-4053: Undefined Security Weakness

Cross-site scripting XSS vulnerability in coWiki 0.3.4 allows remote attackers to inject arbitrary web script or HTML via the q parameter, as demonstrated using 26.html...

CVE-2005-4059: Undefined Security Weakness

SQL injection vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows remote attackers to execute arbitrary SQL commands via the q parameter...

CVE-2005-4032

Cross-site scripting XSS vulnerability in search.cgi in Easy Search System 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2005-4032: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.cgi in Easy Search System 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2005-4004: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.asp in MyTemplateSite 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2005-3966: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.jsp in Java Search Engine JSE 0.9.34 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

qnews.txt

Language: PHP Script: Q-News Version: 2.0 Official website: http://sourceforge.net/projects/q-news/ Problem: Remote file inclusion Discovered by: GB Description: =========== Q-News is a Quick News generator written in PHP that generates small text files that can be included a site, it has a lot o...

CVE-2005-3859

PHP remote file inclusion vulnerability in q-news.php in Q-News 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter...

CVE-2005-3859

PHP remote file inclusion vulnerability in q-news.php in Q-News 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter...

CVE-2005-3859

CVE-2005-3859 describes a PHP remote file inclusion vulnerability in q-news.php (Q-News 2.0) that allows an attacker to execute arbitrary PHP code via a URL supplied in the id parameter. Affected software: Q-News 2.0. Root cause: improper handling of the id parameter enabling inclusion of remote ...

CVE-2005-3859: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in q-news.php in Q-News 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter...

Remote file include in Q-News

Language: PHP Script: Q-News Version: 2.0 Official website: http://sourceforge.net/projects/q-news/ Problem: Remote file inclusion Discovered by: GB Description: =========== Q-News is a Quick News generator written in PHP that generates small text files that can be included a site, it has a lot o...

[SA17771] Q-News "id" File Inclusion Vulnerability

TITLE: Q-News "id" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA17771 VERIFY ADVISORY: http://secunia.com/advisories/17771/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Q-News 2.x http://secunia.com/product/6232/ DESCRIPTION: GB has discovered a vulnerabilit...