CVE-2007-5932

Multiple cross-site scripting XSS vulnerabilities in Fatwire Content Server CS CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the 1 search function, 2 advanced search function, and possibly other components...

CVE-2007-5932

Multiple cross-site scripting XSS vulnerabilities in Fatwire Content Server CS CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the 1 search function, 2 advanced search function, and possibly other components...

CVE-2007-5932: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Fatwire Content Server CS CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the 1 search function, 2 advanced search function, and possibly other components...

MiniBB 2.1 - table SQL Injection

MiniBB 2.1 - table SQL Injection vuln.: miniBB 2.1 table Remote SQL Injection Exploit download: http://www.minibb.net/download.php?file=minibb21 dork: "These forums are running on" "miniBB" author: [email protected] greets to: str0ke, polish under :...

Unfixed XSS vulnerability at www.ddlbyte.com

Security researcher flux, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting www.ddlbyte.com, which at the time of submission ranked 91044 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is currently...

GetMyOwnArcade (search.php query) Remote SQL Injection Vulnerability

No description provided by source. GetMyOwnArcade search.php $query SQL-Injection Discovered By: RoXur777 August 11th 2007 Google-Dork: "Powered by GetMyOwnArcade" / $query is not being filtered before getting passed to a query. Therefore, we can inject SQL code into the SQL-Query. Using...

CVE-2007-4075

Cross-site scripting XSS vulnerability in index.asp in Alisveris Sitesi Scripti allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search mod action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Unfixed XSS vulnerability at www.multiserve.co.nz

Security researcher CoNqUeRoR, has submitted on 26/07/2007 a cross-site-scripting XSS vulnerability affecting www.multiserve.co.nz, which at the time of submission ranked 4110209 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is...

Cross site scripting

Cross-site scripting XSS vulnerability in Gobi as of 20070711, built on Helma, allows remote attackers to inject arbitrary web script or HTML via the q parameter to the search function...

CVE-2007-3693

Cross-site scripting XSS vulnerability in Gobi as of 20070711, built on Helma, allows remote attackers to inject arbitrary web script or HTML via the q parameter to the search function...

CVE-2007-3693: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Gobi as of 20070711, built on Helma, allows remote attackers to inject arbitrary web script or HTML via the q parameter to the search function...

rpm2html 1.6 XSS Vulnerability

----------------------------------------------------------------------| My Name: Vladiii | My Country: Romania | My Site: http://www.rstzone.net | My Team: I hope to enter in RST-Crew : | Contact me: [email protected] | Special Shoutz: kw3rln fluffybunny, floflowsupremacy, mozi2weed, | & all...

CVE-2007-1903

Cross-site scripting XSS vulnerability in search.php in SonicBB 1.0 allows remote attackers to inject arbitrary web script or HTML via the part parameter...

Cross site scripting in mephisto 0.7.3

Cross site scripting in mephisto 0.7.3 security advisory References: http://www.mephistoblog.com https://vulners.com/cve/CVE-2007-1873 Description: Cross site scripting describes attacks that allow to insert malicious html or javascript code via get or post forms. This can be used to steal sessio...

CVE-2006-7188

The CVE-2006-7188 entry concerns WebAPP by web-app.net. Affected component: the search.pl in cgi-lib/user-lib. Before 20060909, remote attackers could read internal forum posts by crafting certain requests, with the issue possibly tied to the $info{'forum'} variable. The provided sources confirm ...

CVE-2006-7188

The search function in cgi-lib/user-lib/search.pl in web-app.net WebAPP before 20060909 allows remote attackers to read internal forum posts via certain requests, possibly related to the $info'forum' variable...

Unfixed XSS vulnerability at www.dll-files.com

Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting www.dll-files.com, which at the time of submission ranked 15436 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It is...

[Full-disclosure] Horde IMP Webmail Client version H3 (4.1.4) fixes multiple XSS issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, Horde IMP Webmail Client version H3 4.1.4 was released a few hours ago. It contains fixes for 2 XSS issues compared to 4.1.4 RC1. 1. Script injection through email subject lines in threaded view Subject lines of emails, when displayed in vulnerabl...

Unfixed XSS vulnerability at thecrack.us

Security researcher St@rExT, has submitted on 03/03/2007 a cross-site-scripting XSS vulnerability affecting thecrack.us, which at the time of submission ranked 247262 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2007. It is currently...

Unfixed XSS vulnerability at www.araba.com

Security researcher zuppergazi, has submitted on 24/02/2007 a cross-site-scripting XSS vulnerability affecting www.araba.com, which at the time of submission ranked 2152 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/03/2007. It is currentl...