1480 matches found
CVE-2006-0345: Undefined Security Weakness
Multiple SQL injection vulnerabilities in SaralBlog 1.0 allow remote attackers to execute arbitrary SQL commands via the search parameter to search.php. NOTE: the id/viewprofile.php issue is already covered by CVE-2005-4058...
Cross site scripting
Cross-site scripting XSS vulnerability in searchform.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2006-0175
Cross-site scripting XSS vulnerability in searchform.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2006-0175
Cross-site scripting XSS vulnerability in searchform.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2006-0175: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in searchform.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
PT-2005-5443 · Fidra · Fidra Lighthouse Cms
Name of the Vulnerable Software and Affected Versions: Fidra Lighthouse CMS versions 1.1.0 and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the search parameter in a query string to the home page. The vendor disputes this...
CVE-2005-4496
Cross-site scripting XSS vulnerability in search in SyntaxCMS 1.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter...
CVE-2005-4496
Cross-site scripting XSS vulnerability in search in SyntaxCMS 1.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter...
CVE-2005-4431
SQL injection vulnerability in WowBB 1.65 allows remote attackers to execute arbitrary SQL commands via the q parameter to search.php. NOTE: the viewuser.php/sortby vector is already covered by CVE-2005-1554 and CVE-2004-2181...
CVE-2005-4060
Cross-site scripting XSS vulnerability in search.asp in rwAuction Pro 4.0 and 5.0 allows remote attackers to inject arbitrary web script or HTML via the searchtxt parameter...
CVE-2005-4060
Cross-site scripting XSS vulnerability in search.asp in rwAuction Pro 4.0 and 5.0 allows remote attackers to inject arbitrary web script or HTML via the searchtxt parameter...
CVE-2005-4044
Cross-site scripting XSS vulnerability in search.cgi in Amazon Search Directory 1.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly the search parameter...
CVE-2005-4044: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search.cgi in Amazon Search Directory 1.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly the search parameter...
CVE-2005-3967
Cross-site scripting XSS vulnerability in the dosearchsite.action module in Atlassian Confluence 2.0.1 Build 321 allows remote attackers to inject arbitrary web script or HTML via the searchQuery.queryString search module parameter...
CVE-2005-3967
Cross-site scripting XSS vulnerability in the dosearchsite.action module in Atlassian Confluence 2.0.1 Build 321 allows remote attackers to inject arbitrary web script or HTML via the searchQuery.queryString search module parameter...
CVE-2005-3972: Undefined Security Weakness
Cross-site scripting XSS vulnerability in extremesearch.php in Extreme Search Corporate Edition 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2005-3881
SQL injection vulnerability in search.php in AtlantisFAQ Knowledge Base Software 2.03 and earlier allows remote attackers to execute arbitrary SQL commands via the searchStr parameter...
CVE-2005-3865: Undefined Security Weakness
SQL injection vulnerability in index.php in AllWeb search 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the search parameter...
CVE-2005-3841
Cross-site scripting XSS vulnerability in kPlaylist 1.6 build 400, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchfor search parameter...
CVE-2005-3841
Cross-site scripting XSS vulnerability in kPlaylist 1.6 build 400, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchfor search parameter...