Mini-NUKE v1.8

= Mini-NUKE v1.8 = Autore: SpiderZ = sito: www.spiderz.tk = Attacco: XSS = file: Search.asp Url: http://www.sito.com/search.phpscript/script Script: nrw&la="scriptalert"Xss by SpiderZ"/script Risultato:...

CVE-2006-1229

CVE-2006-1229 is a SQL injection vulnerability in the search.asp page of Hosting Controller 6.1 (Hotfix 2.9) that allows remote execution of arbitrary SQL commands via the search parameter. The core issue is an injectable parameter in the search functionality, resulting in partial confidentiality...

CVE-2006-1229: Undefined Security Weakness

SQL injection vulnerability in search.asp in Hosting Controller 6.1 Hotfix 2.9 allows remote attackers to execute arbitrary SQL commands via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0466: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.asp in Goldstag Content Management System allows remote attackers to inject arbitrary web script or HTML via the text parameter...

CVE-2005-4545

Cross-site scripting XSS vulnerability in search.asp in NetDirect ShopEngine allows remote attackers to inject arbitrary web script or HTML via the EXPS parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4545

CVE-2005-4545 is an XSS vulnerability in NetDirect ShopEngine, specifically in search.asp where the EXPS parameter can be exploited to inject arbitrary script/HTML. The description from multiple sources confirms the vulnerability but does not provide detailed product versions, root-cause specific...

CVE-2005-4545: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.asp in NetDirect ShopEngine allows remote attackers to inject arbitrary web script or HTML via the EXPS parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4374

Multiple cross-site scripting XSS vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 s parameter to faq.asp and 2 searchQuery parameter to search.asp...

CVE-2005-4374: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 s parameter to faq.asp and 2 searchQuery parameter to search.asp...

CVE-2005-4165: Undefined Security Weakness

Multiple SQL injection vulnerabilities in ASP-DEV ASP Resources Forum allow remote attackers to execute arbitrary SQL commands via the 1 forumid parameter to forum.asp, 2 unspecified parameters to register.asp, and 3 the "Search For" field in search.asp...

CVE-2005-4060: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.asp in rwAuction Pro 4.0 and 5.0 allows remote attackers to inject arbitrary web script or HTML via the searchtxt parameter...

CVE-2005-4063: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in NetAuctionHelp 3.0 and earlier allow remote attackers to inject arbitrary HTML and web script via the 1 L, 2 sort, 3 category, 4 categoryname parameters to search.asp...

CVE-2005-3999

Cross-site scripting XSS vulnerability in Search.asp in SiteBeater MP3 Catalog 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2005-4004

Cross-site scripting XSS vulnerability in search.asp in MyTemplateSite 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2005-4004: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.asp in MyTemplateSite 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2005-3999: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Search.asp in SiteBeater MP3 Catalog 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2005-3999

The CVE-2005-3999 entry describes a reflected XSS in SiteBeater MP3 Catalog (version 2.03 and earlier) via the Search.asp page, where unspecified parameters can be injected with arbitrary script/HTML. This vulnerability enables remote attackers to execute script in a victim’s browser. The availab...

CVE-2005-3998: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.asp in Solupress News 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

CVE-2005-4004

CVE-2005-4004 describes a cross-site scripting (XSS) vulnerability in the web interface of MyTemplateSite up to version 1.2, where an attacker can inject arbitrary script or HTML via the q parameter to search.asp. The affected component is the search functionality (search.asp) and the root cause ...

MyTemplateSite XSS vuln.

MyTemplateSite XSS vuln. Vuln. dicovered by : r0t Date: 3 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/mytemplatesite-xss-vuln.html vendor:http://www.infinetsoftware.com/products/mts/default.asp affected version: 1.2 and prior Product Description: Create your own template site...