CVE-2007-6002: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Fenriru 1 Sleipnir 2.5.17 R2 and earlier and 2 Grani 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search field in a search for additions to the Favorites section...

CVE-2002-2365: Improper Input Validation

Simple WAIS SWAIS 1.11 allows remote attackers to execute arbitrary commands via the shell metacharacters in the search field, as demonstrated using the "|" pipe character...

CVE-2003-1526

PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as 1 ", 2 ', or 3 in the search field, which reveals the path in an error message...

CVE-2003-1526: Exposure of Sensitive Information to an Unauthorized Actor

PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as 1 ", 2 ', or 3 in the search field, which reveals the path in an error message...

CVE-2007-5433: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.cgi in Site-Up 2.64 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 search or 2 search mask field...

CVE-2007-4433: Undefined Security Weakness

Cross-site scripting XSS vulnerability in textfilesearch.aspx in the Text File Search ASP.NET edition allows remote attackers to inject arbitrary web script or HTML via the search field...

CVE-2006-6936

Cross-site scripting XSS vulnerability in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary HTML or web script via 1 the catname parameter to displaypic.asp or 2 the search field. NOTE: vector 1 likely overlaps CVE-2006-3032...

CVE-2006-6936: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary HTML or web script via 1 the catname parameter to displaypic.asp or 2 the search field. NOTE: vector 1 likely overlaps CVE-2006-3032...

CVE-2006-4162

Cross-site scripting XSS vulnerability in Dragonfly CMS 9.0.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search field...

CVE-2006-4162

Cross-site scripting XSS vulnerability in Dragonfly CMS 9.0.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search field...

CVE-2006-4162: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Dragonfly CMS 9.0.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search field...

CVE-2006-4105

Cross-site scripting XSS vulnerability in Fill Threads Database FTD 3.7.3 allows remote attackers to inject arbitrary web script or HTML via the 1 search field or 2 an e-mail message...

CVE-2006-4105

Cross-site scripting XSS vulnerability in Fill Threads Database FTD 3.7.3 allows remote attackers to inject arbitrary web script or HTML via the 1 search field or 2 an e-mail message...

CVE-2006-4105: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Fill Threads Database FTD 3.7.3 allows remote attackers to inject arbitrary web script or HTML via the 1 search field or 2 an e-mail message...

PT-2006-4654 · Amazing Flash · Amazing Flash Afcommerce Shopping Cart

Name of the Vulnerable Software and Affected Versions: Amazing Flash AFCommerce Shopping Cart affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands via the search field, potentially leading to unauthorized access or data manipulation...

CVE-2006-3794: Undefined Security Weakness

SQL injection vulnerability in Amazing Flash AFCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the search field. NOTE: the vendor has disputed this issue, stating "if someone were to type in any sql injection code, that code would never be queried...

CVE-2006-3666: Undefined Security Weakness

SQL injection vulnerability in AjaxPortal 3.0, with magicquotesgpc disabled, allows remote attackers to execute arbitrary SQL commands via the 'Search' field, a different vulnerability than CVE-2006-3515...

CVE-2006-3292

SQL injection vulnerability in the Search gadget in Jaws 0.6.2 allows remote attackers to execute arbitrary SQL commands via queries with the "LIKE" keyword in the searchdata parameter search field...

CVE-2006-2997

Cross-site scripting XSS vulnerability in ZMS 2.9 and earlier, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the raw parameter in the search field...

CVE-2006-2997: Undefined Security Weakness

Cross-site scripting XSS vulnerability in ZMS 2.9 and earlier, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the raw parameter in the search field...