CVE-2009-4110

The CVE-2009-4110 entry applies to DotNetNuke (DNN) 4.8.x through 5.1.4, where the Search functionality in SearchResults.aspx is vulnerable to cross-site scripting (XSS) due to insufficient sanitization of the user-provided search terms before dynamic HTML output. The vulnerability is exploitable...

Unfixed XSS vulnerability at india.recruit.net

Security researcher sameer saran, has submitted on 26/10/2009 a cross-site-scripting XSS vulnerability affecting india.recruit.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2010. It is...

CVE-2009-3503

Multiple SQL injection vulnerabilities in search.aspx in BPowerHouse BPHolidayLettings 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 rid and 2 tid parameters...

CVE-2009-2882

Multiple cross-site scripting XSS vulnerabilities in PG MatchMaking allow remote attackers to inject arbitrary web script or HTML via the show parameter to 1 browseladies.php and 2 browsemen.php, the 3 gender parameter to search.php, and the 4 id parameter to services.php...

Unfixed XSS vulnerability at www.rtl.fr

Security researcher 599eme Man, has submitted on 08/07/2009 a cross-site-scripting XSS vulnerability affecting www.rtl.fr, which at the time of submission ranked 12025 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2009. It is currently...

Unfixed XSS vulnerability at www.whatisscientology.org

Security researcher lljkrieg, has submitted on 21/07/2009 a cross-site-scripting XSS vulnerability affecting www.whatisscientology.org, which at the time of submission ranked 313267 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/09/2009. It...

Unfixed XSS vulnerability at www.nhl.nl

Security researcher Jurpie, has submitted on 23/05/2009 a cross-site-scripting XSS vulnerability affecting www.nhl.nl, which at the time of submission ranked 184188 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/05/2009. It is currently...

CVE-2009-1735

Cross-site scripting XSS vulnerability in search.php in VidSharePro allows remote attackers to inject arbitrary web script or HTML via the searchtxt parameter. NOTE: some of these details are obtained from third party information...

Unfixed XSS vulnerability at www.rtsbanana.com

Security researcher Skyr3x, has submitted on 02/07/2009 a cross-site-scripting XSS vulnerability affecting www.rtsbanana.com, which at the time of submission ranked 6923737 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is...

CVE-2008-6015

Multiple SQL injection vulnerabilities in search.php in EsFaq 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 keywords and 2 cat parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Unfixed XSS vulnerability at irish-charts.com

Security researcher Viper.aT, has submitted on 12/04/2008 a cross-site-scripting XSS vulnerability affecting irish-charts.com, which at the time of submission ranked 10365959 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/04/2008. It is...

CVE-2008-5193

Cross-site scripting XSS vulnerability in search.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: this might overlap CVE-2007-4024...

Unfixed XSS vulnerability at foro.sfpcoahuila.gob.mx

Security researcher xylitol, has submitted on 11/08/2008 a cross-site-scripting XSS vulnerability affecting foro.sfpcoahuila.gob.mx, which at the time of submission ranked 1120000 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/06/2009. It i...

Opera Web Browser Command Execution and XSS Vulnerabilities (Windows)

The host is installed with Opera Web Browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperacmdexecnxssvulnwin.nasl 6519 2017-07-04 14:08:14Z cfischer $ Opera Web Browser Command Execution and XSS Vulnerabilities Windows Authors: Chandan S Copyright: Copyright c...

Opera Web Browser Command Execution and XSS Vulnerabilities (Linux)

The host is installed with Opera Web Browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperacmdexecnxssvulnlin.nasl 6539 2017-07-05 12:02:14Z cfischer $ Opera Web Browser Command Execution and XSS Vulnerabilities Linux Authors: Chandan S Copyright: Copyright c 20...

Opera Web Browser Multiple XSS Vulnerability (Windows)

The host is installed with Opera web browser and is prone to multiple Cross Site Scripting XSS Vulnerability. OpenVAS Vulnerability Test $Id: gboperamultvulnoct08win.nasl 6519 2017-07-04 14:08:14Z cfischer $ Opera Web Browser Multiple XSS Vulnerability Windows Authors: Chandan S Copyright:...

Unfixed XSS vulnerability at www.web-agri.fr

Security researcher Mystick, has submitted on 30/10/2008 a cross-site-scripting XSS vulnerability affecting www.web-agri.fr, which at the time of submission ranked 366665 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is current...

CVE-2008-4177

SQL injection vulnerability in search.php in Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the c parameter...

CVE-2008-3394

Multiple cross-site scripting XSS vulnerabilities in search.cfm in BookMine allow remote attackers to inject arbitrary web script or HTML via the 1 gallery and 2 searchstring parameters...

Unfixed XSS vulnerability at www.masterlock.com

Security researcher mckt, has submitted on 25/07/2008 a cross-site-scripting XSS vulnerability affecting www.masterlock.com, which at the time of submission ranked 265381 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/07/2008. It is current...