1557 matches found
CVE-2004-2468: Undefined Security Weakness
Cross-site scripting XSS vulnerability in SillySearch 2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2002-2107
Cross-site scripting XSS vulnerability in the lookup script in Veridis OpenKeyServer OKS 1.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2002-2107: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the lookup script in Veridis OpenKeyServer OKS 1.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2005-2392
Cross-site scripting XSS vulnerability in index.php for CMSimple 2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in the search function...
CVE-2005-2392: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php for CMSimple 2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in the search function...
CVE-2005-2163
AutoIndex PHP Script 1.5.2 is affected by a stored/reflected XSS in index.php via the search parameter. The vulnerability allows an attacker to inject arbitrary HTML/JavaScript, which is executed in the victim’s browser and can lead to cookie theft or session hijacking. The Nessus entry confirms ...
CVE-2005-2163
Cross-site scripting XSS vulnerability in index.php in AutoIndex PHP Script 1.5.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2005-2163
Cross-site scripting XSS vulnerability in index.php in AutoIndex PHP Script 1.5.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2005-2163: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in AutoIndex PHP Script 1.5.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2003-1211: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search.asp for MaxWebPortal 1.30 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via the Search parameter...
CVE-2005-1500
Multiple SQL injection vulnerabilities in myBloggie 2.1.1 allow remote attackers to execute arbitrary SQL commands via 1 the keyword parameter in search.php; or 2 the dateno parameter in viewdate mode, 3 the catid parameter in viewcat mode, the 4 monthno or 5 year parameter in viewmonth mode, or ...
e107 search.php search_info Parameter Traversal Arbitrary File Inclusion
The version of e107 installed on the remote host is affected by a remote file inclusion vulnerability because it fails to properly sanitize user-supplied input to the 'searchinfo' parameter of the 'search.php' script. This vulnerability could allow a remote, unauthenticated attacker to view...
CVE-2004-1797
Cross-site scripting XSS vulnerability in search.php for FreznoShop 1.3.0 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2004-1797: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search.php for FreznoShop 1.3.0 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2005-1183
Cross-site scripting XSS vulnerability in mvnForum 1.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the Search parameter...
CVE-2005-0802
Cross-site scripting XSS vulnerability in search.asp in ACS Blog 0.8 through 1.1b allows remote attackers to execute arbitrary web script or HTML via the search parameter...
CVE-2005-1183
CVE-2005-1183 affects mvnForum 1.0 RC4 and is a cross-site scripting (XSS) vulnerability due to failure to sanitize user-supplied input in the Search field. The issue enables remote injection of arbitrary script/HTML via the search parameter, as described by multiple sources (OpenVAS NASL notes i...
CVE-2005-1183
Cross-site scripting XSS vulnerability in mvnForum 1.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the Search parameter...
CVE-2005-1183: Undefined Security Weakness
Cross-site scripting XSS vulnerability in mvnForum 1.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the Search parameter...