armaghacms-xss.txt

--------------------------------------------------------- Portal Name: Armaghan CMS Vendor : http://armaghanit.ir Vulnerable File : search.asp Author : PouyaServer , [email protected] Vulnerability : XSS Cross site scripting ---------------------------------------------------------...

CVE-2008-4746: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Uniwin eCart Professional 2.0.17 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to 1 search.asp and 2 cartUtil.asp...

Fixed XSS vulnerability at www.gbdgp.com.au

Security researcher PaPPy, has submitted on 10/05/2008 a cross-site-scripting XSS vulnerability affecting www.gbdgp.com.au, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/05/2008. It is currently...

Unfixed XSS vulnerability at www.matheon.de

Security researcher BlueMax, has submitted on 09/08/2008 a cross-site-scripting XSS vulnerability affecting www.matheon.de, which at the time of submission ranked 2256152 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/08/2008. It is current...

Unfixed XSS vulnerability at www.efds.de

Security researcher BlueMax, has submitted on 09/08/2008 a cross-site-scripting XSS vulnerability affecting www.efds.de, which at the time of submission ranked 15675425 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/08/2008. It is currently...

Unfixed XSS vulnerability at www.flandersbio.be

Security researcher B, has submitted on 08/11/2008 a cross-site-scripting XSS vulnerability affecting www.flandersbio.be, which at the time of submission ranked 3763922 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is currently...

Unfixed XSS vulnerability at www.dvdgamedepot.com

Security researcher BlueMax, has submitted on 08/11/2008 a cross-site-scripting XSS vulnerability affecting www.dvdgamedepot.com, which at the time of submission ranked 6327951 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/06/2009. It is...

CVE-2008-3559: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in KAPhotoservice allow remote attackers to inject arbitrary web script or HTML via the 1 filename parameter to search.asp and the 2 page parameter to order.asp. NOTE: the provenance of this information is unknown; the details are obtained solely...

Unfixed XSS vulnerability at www.tuzonalatina.com

Security researcher Uber0n, has submitted on 23/07/2008 a cross-site-scripting XSS vulnerability affecting www.tuzonalatina.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/08/2008. It is currentl...

CVE-2008-2776

The CVE-2008-2776 entry describes a Cross-site scripting (XSS) vulnerability in DT Centrepiece 4.0, located in search.asp and exploitable via the searchFor parameter. The underlying issue is a failure to properly neutralize user-supplied input, enabling remote attackers to inject arbitrary web sc...

CVE-2008-2776: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.asp in DT Centrepiece 4.0 allows remote attackers to inject arbitrary web script or HTML via the searchFor parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-2775: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in search.asp in DT Centrepiece 4.0 allows remote attackers to execute arbitrary SQL commands via the searchFor parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-2757

SQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter...

CVE-2008-2764

Cross-site scripting XSS vulnerability in admin/search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors "all fields"...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 showfields, 2 text, and 3 submissions parameters to search.asp and the 4 name parameter to users.asp. NOTE: some of these details are...

CVE-2008-2759

Multiple cross-site scripting XSS vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 showfields, 2 text, and 3 submissions parameters to search.asp and the 4 name parameter to users.asp. NOTE: some of these details are...

CVE-2008-2759

Multiple cross-site scripting XSS vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 showfields, 2 text, and 3 submissions parameters to search.asp and the 4 name parameter to users.asp. NOTE: some of these details are...

CVE-2008-2767

CVE-2008-2767 describes a SQL injection vulnerability in the search.asp component of Xigla Poll Manager XE. The flaw allows remote authenticated users with administrator privileges to execute arbitrary SQL commands through the orderby parameter, potentially impacting data confidentiality, integri...

CVE-2008-2764

CVE-2008-2764 is a cross-site scripting (XSS) vulnerability in admin/search.asp of Xigla Absolute Live Support XE 5.1. The issue allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors in all fields. The public sources (NVD/NVD-related entries) co...

CVE-2008-2766

The CVE-2008-2766 entry concerns Xigla Absolute Image Gallery XE, with a cross-site scripting (XSS) vulnerability affecting the admin/search.asp and gallery.asp endpoints. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The provided documents iden...