218 matches found
CVE-2006-6936
Cross-site scripting XSS vulnerability in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary HTML or web script via 1 the catname parameter to displaypic.asp or 2 the search field. NOTE: vector 1 likely overlaps CVE-2006-3032...
CVE-2006-4162
Cross-site scripting XSS vulnerability in Dragonfly CMS 9.0.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search field...
CVE-2006-4162
Cross-site scripting XSS vulnerability in Dragonfly CMS 9.0.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search field...
CVE-2006-4105
Cross-site scripting XSS vulnerability in Fill Threads Database FTD 3.7.3 allows remote attackers to inject arbitrary web script or HTML via the 1 search field or 2 an e-mail message...
CVE-2006-4105
Cross-site scripting XSS vulnerability in Fill Threads Database FTD 3.7.3 allows remote attackers to inject arbitrary web script or HTML via the 1 search field or 2 an e-mail message...
PT-2006-4654 · Amazing Flash · Amazing Flash Afcommerce Shopping Cart
Name of the Vulnerable Software and Affected Versions: Amazing Flash AFCommerce Shopping Cart affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands via the search field, potentially leading to unauthorized access or data manipulation...
CVE-2006-3292
SQL injection vulnerability in the Search gadget in Jaws 0.6.2 allows remote attackers to execute arbitrary SQL commands via queries with the "LIKE" keyword in the searchdata parameter search field...
CVE-2006-2997
Cross-site scripting XSS vulnerability in ZMS 2.9 and earlier, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the raw parameter in the search field...
CVE-2006-2827
SQL injection vulnerability in search.php in X-Cart Gold and Pro 4.0.18, and X-Cart 4.1.0 beta 1, allows remote attackers to execute arbitrary SQL commands via the "Search for pattern" field, when the settings specify only "Search in Detailed description" and "Search also in ISBN." NOTE: the vend...
CMSimple 'index.php?search' XSS Vulnerability - Active Check
CMSimple is prone to cross-site scripting XSS attacks due to its failure to sanitize user-supplied input to the search field. SPDX-FileCopyrightText: 2006 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2005-4433
Cross-site scripting XSS vulnerability in search.php in Esselbach Storyteller CMS 1.8 allows remote attackers to inject arbitrary web script or HTML via the query parameter, which is used by the Search field...
CVE-2005-4433
Cross-site scripting XSS vulnerability in search.php in Esselbach Storyteller CMS 1.8 allows remote attackers to inject arbitrary web script or HTML via the query parameter, which is used by the Search field...
MVNForum Search Cross-Site Scripting Vulnerability
The version of mvnForum installed on the remote host is prone to cross-site scripting attacks due to its failure to sanitize user-supplied input to the search field. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are...
Sql injection in jPortal version 2.3.1 (module download)
Versions: all from 2.2.1 to 2.3.1+Service Pack+shop jportalI check this bug only on one site SQL injection attack if magicquotesqpc=Off Problem is in file serching engine download.php, witch code is in “module/down.inc.php” file: code if$cat=='all' $q = "AND title LIKE '$word'"; else $q = "AND...
CVE-2004-1817
Cross-site scripting XSS vulnerability in modules.php in Php-Nuke 7.1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 Your Name field, 2 e-mail field, 3 nicname field, 4 fname parameter, 5 ratenum parameter, or 6 search field...
CVE-2003-1526
PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as 1 ", 2 ', or 3 in the search field, which reveals the path in an error message...
CVE-2003-0341
The CVE-2003-0341 entry describes an XSS vulnerability in Owl Intranet Engine, affecting version 0.71 and earlier. The issue allows remote attackers to inject arbitrary script through the Search field, with impact aligning to partial confidentiality, integrity, and availability (per CVSS 2.0 vect...