v3chatIM.txt

V3 Chat Instant Messenger http://www.v3chat.com/ Affected files: /mail/index.php /mail/reply.php isonline.php online.php profile.php profileview.php search.php mycontacts.php expire.php Editing your profile: - input boxes ------------------------------------------ Mail Vulnerabilities: Full path...

Sql injection

SQL injection vulnerability in cosmicshop/search.php in CosmicShoppingCart allows remote attackers to execute arbitrary SQL commands via the max parameter...

Sphider Multiple Xss Vulnerabilities

--------------------------------------------- Sphider Multiple Xss Vulnerabilities --------------------------------------------- Site: http://www.cs.ioc.ee/ando/sphider/ Bug: 1- http://victim/path/search.php/"scriptalert/Soot//script 2-...

CVE-2006-2343

Cross-site scripting XSS vulnerability in Search.do in ManageEngine OpManager 6.0 allows remote attackers to inject arbitrary web script or HTML via the searchTerm parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2005-4545

Cross-site scripting XSS vulnerability in search.asp in NetDirect ShopEngine allows remote attackers to inject arbitrary web script or HTML via the EXPS parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4496

CVE-2005-4496 is an XSS vulnerability in SyntaxCMS 1.2.1 and earlier, exploitable via the search_query parameter to inject arbitrary script or HTML. Affected: SyntaxCMS versions up to 1.2.1 (and earlier). Impact: remote script/HTML execution as an attacker-provided payload; details on exploit vec...

CVE-2005-4385

Cofax

CVE-2005-3852

The CVE-2005-3852 entry relates to OWOS Lite Edition for ASP 3.0. Affected component: search.asp; vulnerability: SQL injection via the keyword parameter. Impact: remote attackers could execute arbitrary SQL commands. No remediation details are provided in the supplied documents.

SQL-injections in koobi-cms

SQL-injections in koobi-cms 4.2.3 The program: koobi-cms Homepage: http://www.dream4.de/ Vulnerable Versions: 4.2.3 Has found: CENSORED SVT 28.04.05 The description --------------- Vulnerability has been found in parameter page. In koobi-cms it Refers to - p. Data transferred to this parameter no...

CVE-2005-0802

CVE-2005-0802 concerns a cross-site scripting (XSS) vulnerability in the search.asp handler of ACS Blog versions 0.8 through 1.1b. The issue allows remote attackers to inject and execute arbitrary web script or HTML via the search parameter, potentially impacting users viewing search results. The...

CSS in DMOZGateway ( php-nuke )

New hole in an phpnuke addon. The concerned addon is DMOZGateway. He allows to search on the web via the dmoz.org site. The addon's url is th following one : /modules.php? op=modload&name=DMOZGateway&file=index The cross site scripting hole is : /modules.php?...

Sambar Server 4.3/4.4 Beta 3 - Search CGI

source: https://www.securityfocus.com/bid/1684/info The Sambar Server was created to test a three-tier communication infrastructure modeled after the Sybase Open Client/Open Server. Soon thereafter, the idea of leveraging the infrastructure for dynamic delivery of content on the WWW resulted in t...