CVE-2009-2021

SQL injection vulnerability in search.php in Virtue Classifieds allows remote attackers to execute arbitrary SQL commands via the category parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the search feature in XMLPortal 3.0 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2008-6600

Cross-site scripting XSS vulnerability in the search feature in XMLPortal 3.0 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2008-6600: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the search feature in XMLPortal 3.0 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

Unfixed XSS vulnerability at www.agid.org.tr

Security researcher Kacak, has submitted on 02/11/2009 a cross-site-scripting XSS vulnerability affecting www.agid.org.tr, which at the time of submission ranked 6661455 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is currentl...

CVE-2008-4747: Exposure of Sensitive Information to an Unauthorized Actor

Unspecified vulnerability in the search feature in Sun Java System LDAP JDK before 4.20 allows context-dependent attackers to obtain sensitive information via unknown attack vectors related to the LDAP JDK library...

CVE-2008-3316

Cross-site scripting XSS vulnerability in the search feature in the Forum plugin before 2.7.1 for Geeklog allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to 1 publichtml/index.php, 2 config.php, and 3 functions.inc...

Unfixed XSS vulnerability at www.bamzu.com

Security researcher fallingmidget, has submitted on 25/07/2008 a cross-site-scripting XSS vulnerability affecting www.bamzu.com, which at the time of submission ranked 267332 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/07/2008. It is...

CVE-2008-3316: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the search feature in the Forum plugin before 2.7.1 for Geeklog allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to 1 publichtml/index.php, 2 config.php, and 3 functions.inc...

Unfixed XSS vulnerability at www.jahu.net

Security researcher Apollo15, has submitted on 07/03/2008 a cross-site-scripting XSS vulnerability affecting www.jahu.net, which at the time of submission ranked 67744 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/03/2008. It is currently...

Unfixed XSS vulnerability at www.1001-petites-annonces.com

Security researcher Oxil, has submitted on 06/08/2008 a cross-site-scripting XSS vulnerability affecting www.1001-petites-annonces.com, which at the time of submission ranked 360033 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/08/2008. It...

Sphider 1.3.4 - query Cross-Site Scripting

Sphider 1.3.4 - query Cross-Site Scripting source: https://www.securityfocus.com/bid/29074/info Sphider is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

Unfixed XSS vulnerability at www.meribel.net

Security researcher ironzorg, has submitted on 24/04/2008 a cross-site-scripting XSS vulnerability affecting www.meribel.net, which at the time of submission ranked 183962 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/04/2008. It is...

CVE-2008-1342

Multiple cross-site scripting XSS vulnerabilities in the search feature in Polymita BPM-Suite and CollagePortal allow remote attackers to inject arbitrary web script or HTML via the 1 q and 2 luceneindexfieldvalue parameters. NOTE: the provenance of this information is unknown; the details are...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the search feature in Polymita BPM-Suite and CollagePortal allow remote attackers to inject arbitrary web script or HTML via the 1 q and 2 luceneindexfieldvalue parameters. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-1342

CVE-2008-1342 affects the search feature in Polymita BPM-Suite and CollagePortal . The vulnerabilities are described as cross-site scripting (XSS) weaknesses that allow remote attackers to inject arbitrary web script or HTML via the parameters _q and lucene_index_field_value . The sources consist...

Unfixed XSS vulnerability at www.fh-jena.de

Security researcher Fabian Fingerle, has submitted on 18/02/2008 a cross-site-scripting XSS vulnerability affecting www.fh-jena.de, which at the time of submission ranked 201106 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/03/2008. It is...

Cross site scripting

Cross-site scripting XSS vulnerability in Webmin 1.370 and 1.390 and Usermin 1.300 and 1.320 allows remote attackers to inject arbitrary web script or HTML via the search parameter to webminsearch.cgi aka the search section, and possibly other components accessed through a "search box" or "open...

Cross site scripting

Cross-site scripting XSS vulnerability in OpenLD before 1.1.9, and 1.1-modified before 1.1-modified3, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the Search feature, possibly the term parameter...

CVE-2007-2610

Cross-site scripting XSS vulnerability in OpenLD before 1.1.9, and 1.1-modified before 1.1-modified3, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the Search feature, possibly the term parameter...