CVE-2007-5479

CVE-2007-5479 is a cross-site scripting (XSS) vulnerability disclosed for Xcomputer, affecting the Search.asp functionality. The issue allows remote attackers to inject arbitrary web script or HTML via the EXPS parameter. The provided documents confirm the vulnerability and its presence in the Se...

CVE-2007-5479: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Search.asp in Xcomputer allows remote attackers to inject arbitrary web script or HTML via the EXPS parameter...

xcomputer-xss.txt

Xcomputer - Lang Parameter Cross-Site Scripting Vulnerability Download: http://www.xcomputer.cz/ Bug found by JosS / Jose Luis Góngora Fernández Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "power by xcomputer.cz"...

Unfixed XSS vulnerability at search.entmag.com

Security researcher tenest, has submitted on 28/09/2007 a cross-site-scripting XSS vulnerability affecting search.entmag.com, which at the time of submission ranked 773010 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is...

Unfixed XSS vulnerability at www.ytrx.com

Security researcher CoNqUeRoR, has submitted on 25/07/2007 a cross-site-scripting XSS vulnerability affecting www.ytrx.com, which at the time of submission ranked 246339 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is currentl...

Unfixed XSS vulnerability at www.yeniperspektif.com

Security researcher BackDoor, has submitted on 07/10/2007 a cross-site-scripting XSS vulnerability affecting www.yeniperspektif.com, which at the time of submission ranked 978703 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2007. It is...

Unfixed XSS vulnerability at www.tercumanhaber.com

Security researcher BackDoor, has submitted on 07/10/2007 a cross-site-scripting XSS vulnerability affecting www.tercumanhaber.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2007. It is...

Unfixed XSS vulnerability at www.alanyaradyotime.com

Security researcher BackDoor, has submitted on 07/10/2007 a cross-site-scripting XSS vulnerability affecting www.alanyaradyotime.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2007. It is...

Unfixed XSS vulnerability at www.haberisparta.com

Security researcher BackDoor, has submitted on 07/10/2007 a cross-site-scripting XSS vulnerability affecting www.haberisparta.com, which at the time of submission ranked 4302774 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2007. It is...

CVE-2007-3540

CVE-2007-3540 describes multiple XSS vulnerabilities in rwAuction Pro 4.0/5.0. The flaw is in the search.asp page, exploitable via input parameters including search , show , searchtype , catid , and searchtxt . An attacker could inject arbitrary script/HTML through these inputs, with impact limit...

CVE-2007-3540: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in search.asp in rwAuction Pro 5.0 allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 show, 3 searchtype, 4 catid, and 5 searchtxt parameters, a different version and vectors than CVE-2005-4060...

Unfixed XSS vulnerability at www.perris.it

Security researcher Hotpockets, has submitted on 30/05/2007 a cross-site-scripting XSS vulnerability affecting www.perris.it, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/05/2007. It is currently...

CVE-2007-2432: Undefined Security Weakness

Cross-site scripting XSS vulnerability in utilities/search.asp in nukedit 4.9.7b allows remote attackers to inject arbitrary web script or HTML via the terms parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-1572: Undefined Security Weakness

SQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter, a different vector than CVE-2007-1440. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-1440

SQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 allows remote attackers to execute arbitrary SQL commands via the author parameter...

JGBBS 3.0beta1 - 'search.asp?author' SQL Injection

JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit SQL Injection Code Search Board ALL UniquE-KeyUniquE-Cracker [email protected]/b...

JGBBS 3.0beta1 (search.asp author) SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== JGBBS 3.0beta1 search.asp author SQL Injection Exploit ======================================================== JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit JGBBS...

JGBBS 3.0beta1 - search.asp?author SQL Injection

JGBBS 3.0beta1 - search.asp?author SQL Injection JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit SQL Injection Code Search Board ALL UniquE-KeyUniquE-Cracker font face="Verdana" siz...

CVE-2007-1440: Undefined Security Weakness

SQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 allows remote attackers to execute arbitrary SQL commands via the author parameter...

CVE-2006-6929

Multiple cross-site scripting XSS vulnerabilities in Rapid Classified 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to a reply.asp or b viewprint.asp, the 2 SH1 parameter to c search.asp, the 3 name parameter to reply.asp, or the 4 dosearch parameter to ...