1480 matches found
CVE-2008-0679
Cross-site scripting XSS vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2007-6696
Multiple cross-site scripting XSS vulnerabilities in WebCalendar 1.1.6 allow remote attackers to inject arbitrary web script or HTML via 1 an event description, 2 the query string to pref.php, and 3 the adv parameter to search.php. NOTE: vector 1 requires user authentication...
CVE-2007-6696
Multiple cross-site scripting XSS vulnerabilities in WebCalendar 1.1.6 allow remote attackers to inject arbitrary web script or HTML via 1 an event description, 2 the query string to pref.php, and 3 the adv parameter to search.php. NOTE: vector 1 requires user authentication...
CVE-2008-0292: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in photoalbum.pl in Dansie Photo Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-0092: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in the search module in Appalachian State University phpWebSite 1.4.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2007-6616
Cross-site scripting XSS vulnerability in simpleforum.cgi in SimpleForum 4.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchkey parameter in a search action. NOTE: some of these details are obtained from third party information...
CVE-2007-6392
SQL injection vulnerability in DWdirectory 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the search parameter to the /search URI...
Sql injection
SQL injection vulnerability in DWdirectory 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the search parameter to the /search URI...
CVE-2007-6392
SQL injection vulnerability in DWdirectory 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the search parameter to the /search URI...
CVE-2007-6392: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in DWdirectory 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the search parameter to the /search URI...
Path traversal
index.php in Tilde CMS 4.x and earlier allows remote attackers to obtain sensitive information via a certain search parameter value in a search action, which reveals the path...
CVE-2007-6161
index.php in Tilde CMS 4.x and earlier allows remote attackers to obtain sensitive information via a certain search parameter value in a search action, which reveals the path...
CVE-2007-6161
index.php in Tilde CMS 4.x and earlier allows remote attackers to obtain sensitive information via a certain search parameter value in a search action, which reveals the path...
Cross site scripting
Cross-site scripting XSS vulnerability in vBTube.php in vBTube 1.1 Beta allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2007-6141
Cross-site scripting XSS vulnerability in vBTube.php in vBTube 1.1 Beta allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2007-6141
The CVE-2007-6141 entry documents a Cross-site scripting (XSS) vulnerability in vbTube.php of vBTube 1.1 Beta, where an attacker can inject arbitrary script/HTML via the search parameter. Affected component: vbTube.php in vBTube 1.1 Beta. Root cause: insufficient input sanitization on the search ...
CVE-2007-6141
Cross-site scripting XSS vulnerability in vBTube.php in vBTube 1.1 Beta allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2007-6141: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in vBTube.php in vBTube 1.1 Beta allows remote attackers to inject arbitrary web script or HTML via the search parameter...
Free Forums "search" Sql Injection
http://Aria-Security.net Aria-Security Team ------------------------------------ Free Forums Sql Injection Vendor: http://www.nvecs.com/forums the search parameter hast an sql injection example: 'having 1=1-- result: MicrosoftODBC Microsoft Access Driver Syntax error missing operator in query...