Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO or 2 the q parameter in an about action to the help system...

CVE-2008-1347: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO or 2 the q parameter in an about action to the help system...

Cross site scripting

Cross-site scripting XSS vulnerability in images.php in the Red Mexico RMSOFT Gallery System GS 2.0 module aka rmgs for XOOPS allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2008-1064: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in images.php in the Red Mexico RMSOFT Gallery System GS 2.0 module aka rmgs for XOOPS allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2007-6540

SQL injection vulnerability in neuron news 1.0 allows remote attackers to execute arbitrary SQL commands via the q parameter to the default URI in patch/...

Sql injection

SQL injection vulnerability in neuron news 1.0 allows remote attackers to execute arbitrary SQL commands via the q parameter to the default URI in patch/...

CVE-2007-6540: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in neuron news 1.0 allows remote attackers to execute arbitrary SQL commands via the q parameter to the default URI in patch/...

SuSE 10 Security Update : ethereal (ZYPP Patch Number 2028)

A security problem was fixed in ethereal, which could be used by remote attackers to hang the ethereal process. - If the SSCOP dissector has a port range configured AND the SSCOP payload protocol is Q.2931, a malformed packet could make the Q.2931 dissector use up available memory. No port range ...

PBLang <= 4.99.17.q Remote File Rewriting / Command Execution

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...

CVE-2003-1536: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Codeworx Technologies DCP-Portal 5.3.1 allow remote attackers to inject arbitrary web script or HTML via 1 the q parameter to search.php and 2 the year parameter to calendar.php...

CVE-2007-1659: Improper Restriction of Operations within the Bounds of a Memory Buffer

Perl-Compatible Regular Expression PCRE library before 7.3 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via regex patterns containing unmatched "\Q\E" sequences with orphan "\E" codes...

pcre regular expression flaws

Perl-Compatible Regular Expression PCRE library before 7.3 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via regex patterns containing unmatched "\Q\E" sequences with orphan "\E" codes...

CVE-2007-5434

Cross-site scripting XSS vulnerability in PRO-search 0.17.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter to the default URI...

CVE-2007-5434: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in PRO-search 0.17.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter to the default URI...

CVE-2007-5050: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Neuron News 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the q parameter...

PT-2007-5634 · Vbulletin Solutions · Vbulletin

Name of the Vulnerable Software and Affected Versions: vBulletin version 3.6.8 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web code or HTML via specific parameters to various PHP files, includi...

Vulnerability in coWiki

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в coWiki. XSS: Уязвимость в главном скрипте в параметре q. http://site/?cmd=srchdoc&q=223E3Cscript3Ealertdocument.cookie3C/script3E Дополнительная информация о данной уязвимости у меня на сайте:...

CVE-2007-4075: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.asp in Alisveris Sitesi Scripti allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search mod action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-4079: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 domain or 2 q parameter to a admin/membersearch.php, or 3 the userid parameter to b admin/edituser.php...

Vulnerability in Google Custom Search Engine

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в локальном поисковике Google Custom Search Engine. Уязвимость в параметре q в главном скрипте. XSS: http://site/search.php?q=3C2Ftitle3E3Cscript3Ealertdocument.cookie3C2Fscript3E О данной уязвимости я писал в рамка...