PT-2006-6748 · Unknown · A-Cart Pro

Name of the Vulnerable Software and Affected Versions: A-Cart Pro version 2.0 Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the productid parameter in "product.asp" or the search parameter in "search.asp". Recommendations: For A-Cart Pr...

CVE-2006-6082

CVE-2006-6082 affects the CreaScripts Creadirectory component. The documented issue is multiple XSS vulnerabilities that allow remote attackers to inject arbitrary script or HTML via the (1) cat parameter to addlisting.asp or (2) the search parameter to search.asp. The root cause is insufficient ...

PT-2006-6739 · Unknown · Activenews Manager

Name of the Vulnerable Software and Affected Versions: ActiveNews Manager affected versions not specified Description: The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities allow remote attackers to execute arbitrary SQL commands. The vulnerabilities can be exploited...

PT-2006-6735 · Baal · Baalasp Forum

Name of the Vulnerable Software and Affected Versions: BaalAsp forum affected versions not specified Description: The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities allow remote attackers to execute arbitrary SQL commands. The vulnerabilities can be exploited through...

CVE-2006-5799

Multiple cross-site scripting XSS vulnerabilities in default.asp in xenis.creator CMS allow remote attackers to inject arbitrary web script or HTML via the 1 contid or 2 search parameters...

CVE-2006-5164

CVE-2006-5164 affects Sum Effect Software digiSHOP 4.0. Vulnerable component: cart.php. Type: cross-site scripting (XSS). Vectors: remote attackers can craft requests using the (1) sortBy or (2) search parameters to inject arbitrary web script/HTML. Impact: potential script execution in the victi...

CVE-2006-4923

Cross-site scripting XSS vulnerability in search.php in eSyndiCat Portal System allows remote attackers to inject arbitrary web script or HTML via the what parameter...

CVE-2006-4923

Cross-site scripting XSS vulnerability in search.php in eSyndiCat Portal System allows remote attackers to inject arbitrary web script or HTML via the what parameter...

CVE-2006-3230

Cross-site scripting XSS vulnerability in index.tmpl in Azureus Tracker 2.4.0.2 and earlier Java BitTorrent Client Tracker allows remote attackers to inject arbitrary web script or HTML via the search parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in i.List 1.5 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 searchword parameter to search.php or 2 siteurl parameter to add.php...

CVE-2006-2956

Multiple cross-site scripting XSS vulnerabilities in i.List 1.5 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 searchword parameter to search.php or 2 siteurl parameter to add.php...

CVE-2006-2803

CVE-2006-2803 describes multiple cross-site scripting (XSS) vulnerabilities in PHP ManualMaker 1.0. The affected component is the PHP ManualMaker application (version 1.0) with input vectors through the index.php id parameter, the search field (possibly the s parameter), or the comment field. The...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Pre Shopping Mall 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter in search.php the "search box", 2 the prodid parameter in detail.php, and the 3 cid parameter in products.php...

CVE-2006-2669

Multiple cross-site scripting XSS vulnerabilities in Pre Shopping Mall 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter in search.php the "search box", 2 the prodid parameter in detail.php, and the 3 cid parameter in products.php...

CVE-2006-2669

Multiple cross-site scripting XSS vulnerabilities in Pre Shopping Mall 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter in search.php the "search box", 2 the prodid parameter in detail.php, and the 3 cid parameter in products.php...

CVE-2006-2648

Cross-site scripting XSS vulnerability in performsearch.asp for ASPBB 0.52 and earlier allows remote attackers to inject arbitrary HTML or web script via the search parameter...

CVE-2006-2358

Multiple cross-site scripting XSS vulnerabilities in various scripts in Web-Labs CMS allow remote attackers to inject arbitrary web script or HTML via 1 the search parameter and 2 unspecified fields related to e-mail alerts. NOTE: the provenance of this information is unknown; the details are...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in various scripts in Web-Labs CMS allow remote attackers to inject arbitrary web script or HTML via 1 the search parameter and 2 unspecified fields related to e-mail alerts. NOTE: the provenance of this information is unknown; the details are...

CVE-2006-2358

Multiple cross-site scripting XSS vulnerabilities in various scripts in Web-Labs CMS allow remote attackers to inject arbitrary web script or HTML via 1 the search parameter and 2 unspecified fields related to e-mail alerts. NOTE: the provenance of this information is unknown; the details are...

CVE-2006-2343

Cross-site scripting XSS vulnerability in Search.do in ManageEngine OpManager 6.0 allows remote attackers to inject arbitrary web script or HTML via the searchTerm parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...