154 matches found
CVE-2005-4363
Cross-site scripting XSS vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters...
PT-2005-5084 · Lemoon · Lemoon
Name of the Vulnerable Software and Affected Versions: lemoon versions 2.0 and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the q parameter. The vendor has disputed this issue,...
CVE-2005-4297
Cross-site scripting XSS vulnerability in bbBoard 2.56 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly via the "keys" parameter...
CVE-2005-4235
Cross-site scripting XSS vulnerability in knowledgebase.php in WHMCompleteSolution 2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameters...
CVE-2005-4236
Cross-site scripting XSS vulnerability in search.php in CKGOLD allows remote attackers to inject arbitrary web script or HTML via the search parameters...
CVE-2005-4235
Cross-site scripting XSS vulnerability in knowledgebase.php in WHMCompleteSolution 2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameters...
CVE-2005-4062
Cross-site scripting XSS vulnerability in CPSearch.asp in XcClassified 3.x allows remote attackers to inject arbitrary web script or HTML via the search parameters...
CVE-2005-4040
SQL injection vulnerability in FileLister 0.51 and earlier allows remote attackers to execute arbitrary SQL commands via the search parameters, possibly the searchwhat parameter to definesearch.jsp...
CVE-2005-4040
CVE-2005-4040: A SQL injection vulnerability affects FileLister 0.51 and earlier. The flaw arises from unsafely handling input in search parameters (likely definesearch.jsp via the searchwhat parameter), enabling remote attackers to execute arbitrary SQL commands. The vulnerability impact is part...
CVE-2005-4018
SQL injection vulnerability in ls.php in Landshop Real Estate Commerce System 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 start, 2 searchorder, 3 searchtype, 4 searcharea, and 5 keyword parameters...
CVE-2005-3851
Cross-site scripting XSS vulnerability in search.asp in Online Attendance System OASYS Lite 1.0 allows remote attackers to inject arbitrary web script or HTML via certain search parameters, possibly the keyword parameter...
CVE-2005-2324
Cross-site scripting XSS vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the searchtype or searchterm parameters to 1 results.php or 2 categorysearch.php...
CVE-2005-1783
CVE-2005-1783 : BookReview beta 1.0 is vulnerable to a path-disclosure flaw. An attacker can trigger the web server to reveal its filesystem path via parameters to search.htm (likely a missing value in search[string] or an incorrect submit[type]). This is a network-accessible issue with low compl...