CVE-2009-2448

Cross-site scripting XSS vulnerability in ogpshow.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via the searchchoice parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in public/index.php in Linea21 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a resultats-recherche action...

CVE-2009-2442

Cross-site scripting XSS vulnerability in public/index.php in Linea21 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a resultats-recherche action...

CVE-2009-2442

Cross-site scripting XSS vulnerability in public/index.php in Linea21 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a resultats-recherche action...

CVE-2009-2241

Cross-site scripting XSS vulnerability in search.asp in ASP Inline Corporate Calendar allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Campus Virtual-LMS allow remote attackers to inject arbitrary web script or HTML via the 1 courseid parameter to enrolments/step1.php, or the 2 search or 3 siteid parameter to files/sharedlist.php...

CVE-2009-2149

Multiple cross-site scripting XSS vulnerabilities in Campus Virtual-LMS allow remote attackers to inject arbitrary web script or HTML via the 1 courseid parameter to enrolments/step1.php, or the 2 search or 3 siteid parameter to files/sharedlist.php...

CVE-2009-2107

Multiple cross-site scripting XSS vulnerabilities in index.php in Webmedia Explorer webmex 5.09 and 5.10 allow remote attackers to inject arbitrary web script or HTML via event handlers such as onmouseover in the 1 search or 2 tag parameters; 3 arbitrary invalid parameter names that are not...

CVE-2009-2097

SQL injection vulnerability in system/application/controllers/catalog.php in Zoki Soft Zoki Catalog aka Smart Catalog allows remote attackers to execute arbitrary SQL commands via the searchtext parameter. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in search.asp in PDshopPro, when downloaded before 20070308, allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2009-2032

Cross-site scripting XSS vulnerability in search.asp in PDshopPro, when downloaded before 20070308, allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2008-6476

Cross-site scripting XSS vulnerability in blog/search.aspx in BlogEngine.NET allows remote attackers to inject arbitrary web script or HTML via the q parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in blog/search.aspx in BlogEngine.NET allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2009-0704

SQL injection vulnerability in search.php in WSN Guest 1.23 allows remote attackers to execute arbitrary SQL commands via the search parameter in an advanced action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Active Bids allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter to search.asp and the 2 URL parameter to tellafriend.asp...

CVE-2009-0429

Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands via the 1 search parameter to search.asp, 2 SortDir parameter to auctionsended.asp, and the 3 catid parameter to wishlist.php...

CVE-2009-0430

Multiple cross-site scripting XSS vulnerabilities in Active Bids allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter to search.asp and the 2 URL parameter to tellafriend.asp...

Sql injection

Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands via the 1 search parameter to search.asp, 2 SortDir parameter to auctionsended.asp, and the 3 catid parameter to wishlist.php...

CVE-2009-0429

Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands via the 1 search parameter to search.asp, 2 SortDir parameter to auctionsended.asp, and the 3 catid parameter to wishlist.php...

Sql injection

SQL injection vulnerability in search.php in BuzzyWall 1.3.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter...