CVE-2006-2684

Cross-site scripting XSS vulnerability in the search module in CMS Mundo 1.0 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter...

CVE-2006-2684

CVE-2006-2684 : An XSS vulnerability in the search module of CMS Mundo 1.0 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter. The root cause is not fully described beyond “XSS in search.” Impact details are limited in the provided documents; CVSS metric...

CVE-2006-2684

Cross-site scripting XSS vulnerability in the search module in CMS Mundo 1.0 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter...

CVE-2006-2684: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the search module in CMS Mundo 1.0 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter...

CVE-2006-2525

CVE-2006-2525 affects UseBB 1.0 RC1 and earlier. The vulnerability is a SQL injection in the member list search module that allows remote attackers to execute arbitrary SQL commands. The NVD metrics indicate a medium base score (6.4, CVSS v2) with network access, low attack complexity, and no use...

CVE-2006-2525: Undefined Security Weakness

SQL injection vulnerability in UseBB 1.0 RC1 and earlier allows remote attackers to execute arbitrary SQL commands via the member list search module...

X-Cart SQL inj. vuln.

X-Cart SQL inj. vuln. Vuln. discovered by : r0t Date: 20 april 2006 vendorlink:http://www.x-cart.com/ affected versions: X-Cart Gold v4.0.18 X-Cart Pro v4.0.18 X-Cart 4.1.0 beta 1 and prior versions also can be affected . orginal advisory:...

ShopXS v4.0 XSS vuln.

ShopXS v4.0 XSS vuln. Vuln. discovered by : r0t Date: 10 april 2006 vendor:MK Internet-Service GmbH vendorlink:http://www.shopxs.de/ affected versions:ShopXS-Version 4.00 and previous orginal advisory:http://pridels.blogspot.com/2006/04/shopxs-v40-xss-vuln10.html Vuln. Description: Input passed t...

Sql injection

Multiple SQL injection vulnerabilities in Keystone Digital Library Suite DLS 1.5.4 and earlier allow remote attackers to execute arbitrary SQL commands via the subjecttypeid parameter in 1 the index page and 2 the search module...

CVE-2006-1487: Undefined Security Weakness

Cross-site scripting XSS vulnerability in ActiveCampaign SupportTrio 2.50.2 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the KnowledgeBase search module...

CVE-2006-1416

Cross-site scripting XSS vulnerability in afmsearch.aspx in Absolute FAQ Manager .NET 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the question parameter...

CVE-2006-1416

CVE-2006-1416 describes a cross-site scripting (XSS) vulnerability in the afmsearch.aspx page of Absolute FAQ Manager for .NET 4.0 and earlier. The issue arises from unsanitized input in the search module parameters (possibly the question parameter), enabling a remote attacker to inject arbitrary...

CVE-2006-1416

Cross-site scripting XSS vulnerability in afmsearch.aspx in Absolute FAQ Manager .NET 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the question parameter...

CVE-2006-1411

Cross-site scripting XSS vulnerability in Absolute Image Gallery XE 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via 1 the shownew parameter in gallery.asp and 2 unspecified search module parameters...

CVE-2006-1411

The CVE-2006-1411 issue affects Absolute Image Gallery XE 2.0 and earlier, where cross-site scripting (XSS) is possible via the shownew parameter in gallery.asp and through unspecified search module parameters. The underlying vulnerability is input handling that allows arbitrary web script/HTML t...

CVE-2006-1411

Cross-site scripting XSS vulnerability in Absolute Image Gallery XE 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via 1 the shownew parameter in gallery.asp and 2 unspecified search module parameters...

CVE-2006-1416: Undefined Security Weakness

Cross-site scripting XSS vulnerability in afmsearch.aspx in Absolute FAQ Manager .NET 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the question parameter...

[waraxe-2006-SA#046] - Critical sql injection in phpNuke 7.5-7.8

================================================================================ waraxe-2006-SA046 ================================================================================ Critical sql injection in phpNuke 7.5-7.8...

waraxe-2006-SA-046.txt

================================================================================ waraxe-2006-SA046 ================================================================================ Critical sql injection in phpNuke 7.5-7.8...

Sql injection

SQL injection vulnerability in the search module modules/Search/index.php of PHPNuke EV 7.7 -R1 allows remote attackers to execute arbitrary SQL commands via the query parameter, which is used by the search field. NOTE: This is a different vulnerability than CVE-2005-3792...