CVE-2010-5035

Cross-site scripting XSS vulnerability in search.php in iScripts eSwap 2.0 allows remote attackers to inject arbitrary web script or HTML via the txtHomeSearch parameter aka the search field. NOTE: some of these details are obtained from third party information...

Searching within restricted pages/spaces

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-22074. panel This is the issue reference:...

Unfixed XSS vulnerability at www.southsoundchristian.org

Security researcher P0W3RFU7, has submitted on 14/03/2011 a cross-site-scripting XSS vulnerability affecting www.southsoundchristian.org, which at the time of submission ranked 3792048 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011...

Unfixed XSS vulnerability at www.softline.am

Security researcher Sony, has submitted on 19/02/2011 a cross-site-scripting XSS vulnerability affecting www.softline.am, which at the time of submission ranked 6968697 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

Unfixed XSS vulnerability at www.hnn.co.il

Security researcher IsraeliBugsReportProject, has submitted on 10/08/2010 a cross-site-scripting XSS vulnerability affecting www.hnn.co.il, which at the time of submission ranked 400926 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2011...

Unfixed XSS vulnerability at www.ledevoir.com

Security researcher h3xStream, has submitted on 09/07/2010 a cross-site-scripting XSS vulnerability affecting www.ledevoir.com, which at the time of submission ranked 54455 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is...

Unfixed XSS vulnerability at www.corning-observer.com

Security researcher Devek, has submitted on 27/07/2010 a cross-site-scripting XSS vulnerability affecting www.corning-observer.com, which at the time of submission ranked 2410763 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It is...

Abzarak Cross Site Scripting

Abzarak XSS Vulnerability Author:Mohammad Javanbakht Email:secanaratgmail.com blog:secanar.blogspot.com Exploit: site/?s= html code-Decode ACSII to Hex Vulnerable code: Search Demo: http://www.abzarak.com/?s=%3Cinput+value%3D%22XSS%22%3E%3C%2Finput%3E END...

Gekko CMS (SQL Injection) Vulnerability

No description provided by source. 2-SQL injection Vulnerability Description: SQL injection is a code injection technique that exploits a security vulnerability occurring in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for strin...

Cross site scripting

Cross-site scripting XSS vulnerability in ViewVC 1.1 before 1.1.5 and 1.0 before 1.0.11, when the regular expression search functionality is enabled, allows remote attackers to inject arbitrary web script or HTML via vectors related to "searchre input," a different vulnerability than CVE-2010-073...

CVE-2010-0132

Cross-site scripting XSS vulnerability in ViewVC 1.1 before 1.1.5 and 1.0 before 1.0.11, when the regular expression search functionality is enabled, allows remote attackers to inject arbitrary web script or HTML via vectors related to "searchre input," a different vulnerability than CVE-2010-073...

CVE-2009-4736

Cross-site scripting XSS vulnerability in search.php in CommonSense CMS 5.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

Sql injection

SQL injection vulnerability in searchresult.asp in Pre Projects Pre E-Learning Portal allows remote attackers to execute arbitrary SQL commands via the courseID parameter...

Unfixed XSS vulnerability at www.runnersworld.se

Security researcher Uber0n, has submitted on 17/02/2010 a cross-site-scripting XSS vulnerability affecting www.runnersworld.se, which at the time of submission ranked 571313 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/06/2010. It is...

Unfixed XSS vulnerability at www.icomplaints.in

Security researcher Th3 RDX, has submitted on 01/07/2010 a cross-site-scripting XSS vulnerability affecting www.icomplaints.in, which at the time of submission ranked 204926 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is...

Unfixed XSS vulnerability at www.famiglienuove.org

Security researcher Ribel, has submitted on 16/12/2009 a cross-site-scripting XSS vulnerability affecting www.famiglienuove.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2010. It is currentl...

Advanced Image Hosting 2.2 XSS

Vendor: http://yabsoft.com/ .. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + XSS + + http://server/search.php?text=%3Cscript%3Ealertdocument.cookie%3C/script%3E&dosearch=Search + + +...

CVE-2009-4110

Cross-site scripting XSS vulnerability in the search functionality in DotNetNuke 4.8 through 5.1.4 allows remote attackers to inject arbitrary web script or HTML via search terms that are not properly filtered before display in a custom results page...

Cross site scripting

Cross-site scripting XSS vulnerability in the search functionality in DotNetNuke 4.8 through 5.1.4 allows remote attackers to inject arbitrary web script or HTML via search terms that are not properly filtered before display in a custom results page...

CVE-2009-4110

Cross-site scripting XSS vulnerability in the search functionality in DotNetNuke 4.8 through 5.1.4 allows remote attackers to inject arbitrary web script or HTML via search terms that are not properly filtered before display in a custom results page...