488 matches found
CVE-2007-2321
Technical details for CVE-2007-2321 are not publicly available in the provided connected documents; no affected product/version/root-cause/fix information is present. Monitor for updates.
Unfixed XSS vulnerability at www.tripple.net
Security researcher Uber0n, has submitted on 04/12/2007 a cross-site-scripting XSS vulnerability affecting www.tripple.net, which at the time of submission ranked 38044 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/12/2007. It is currently...
Unfixed XSS vulnerability at www.fulltorrent.net
Security researcher MaXWeL, has submitted on 04/03/2007 a cross-site-scripting XSS vulnerability affecting www.fulltorrent.net, which at the time of submission ranked 45821 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2007. It is...
Unfixed XSS vulnerability at www.newasp.net
Security researcher cyber, has submitted on 31/03/2007 a cross-site-scripting XSS vulnerability affecting www.newasp.net, which at the time of submission ranked 13481 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/03/2007. It is currently...
Unfixed XSS vulnerability at www.cstiger.de
Security researcher zuppergazi, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting www.cstiger.de, which at the time of submission ranked 1106260 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is...
CVE-2007-0925
Cross-site scripting XSS vulnerability in search/SearchResults.aspx in Community Server allows remote attackers to inject arbitrary web script or HTML via the q parameter...
Unfixed XSS vulnerability at www.barhan.cn
Security researcher CoNqUeRoR, has submitted on 02/07/2007 a cross-site-scripting XSS vulnerability affecting www.barhan.cn, which at the time of submission ranked 1992683 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/07/2007. It is...
CVE-2006-6196
Cross-site scripting XSS vulnerability in the search functionality in Fixit iDMS Pro Image Gallery allows remote attackers to inject arbitrary web script or HTML via a search field txtsearchtext parameter...
CVE-2006-6196
CVE-2006-6196 describes a cross-site scripting (XSS) vulnerability in the search functionality of the Fixit iDMS Pro Image Gallery. The issue allows remote attackers to inject arbitrary web script or HTML via the search field (txtsearchtext parameter). The NVD entry lists a CVSSv2 base score of 6...
CVE-2006-6196
Cross-site scripting XSS vulnerability in the search functionality in Fixit iDMS Pro Image Gallery allows remote attackers to inject arbitrary web script or HTML via a search field txtsearchtext parameter...
CVE-2006-5430
CVE-2006-5430 is an XSS vulnerability affecting db-central (dbc) Enterprise CMS and db-central CMS, exploitable through the search needle parameter. The core issue is a reflected/script injection in the search functionality, enabling remote attackers to inject arbitrary script/HTML. The CVSS v2 v...
CVE-2006-5168
Cross-site scripting XSS vulnerability in the search functionality in Simon Brown Pebble 2.0.0 RC1 and RC2 allows remote attackers to inject arbitrary web script or HTML via the query string...
CVE-2006-5168
Cross-site scripting XSS vulnerability in the search functionality in Simon Brown Pebble 2.0.0 RC1 and RC2 allows remote attackers to inject arbitrary web script or HTML via the query string...
Pebble 2.0.0 RC[1,2] XSS vulnerability
Software: Pebble Version: 2.0.0 RC1 - 2.0.0 RC2 Author: Simon Brown Homepage: http://pebble.sourceforge.net Abstract Pebble is a blogging system built upon java and XML. There is no database to store the data into but just XML is used instead. Description Vulnerability: XSS vulnerability in...
e107XSS.txt
http://target.xx/search.php?q=&r=0&s=Search&in=1&ex=1&ep= %27%3E%3Cscript%3Ealert%28%2FXSS%2F%29%3C%2Fscript% 3E&be=1&t=1&adv=1&type=all&on=new&time=any&author= ------------------ Submit comment Subject: 'alert/XSS/ Click Reply to this you comment. Ellipsis Security http://www.ellsec.org...
Sphider.txt
--------------------------------------------- Sphider Multiple Xss Vulnerabilities --------------------------------------------- Site: http://www.cs.ioc.ee/ando/sphider/ Bug: 1- http://victim/path/search.php/"alert/Soot/ 2- http://victim/path/search.php?category="alert/Soot/...
CVE-2006-0699
Cross-site scripting XSS vulnerability in search.php in QWikiWiki 1.5, and possibly 1.5.1 and other versions, allows remote attackers to inject arbitrary web script or HTML via the query parameter...
CVE-2006-0639
Cross-site scripting XSS vulnerability in search.php in MyBB aka MyBulletinBoard 1.0.2 allows remote attackers with knowledge of the table prefix to inject arbitrary web script or HTML via a URL encoded value of the keywords parameter, as demonstrated by %3Cscript%3E...
CVE-2006-0639
Cross-site scripting XSS vulnerability in search.php in MyBB aka MyBulletinBoard 1.0.2 allows remote attackers with knowledge of the table prefix to inject arbitrary web script or HTML via a URL encoded value of the keywords parameter, as demonstrated by %3Cscript%3E...
