CVE-2008-5067

CVE-2008-5067 describes a cross-site scripting (XSS) vulnerability in Kmita Catalogue 2.x, exploitable via search.php parameter q. The connected records confirm the affected software (Kmita Catalogue 2.x) and the vulnerable entry point (search.php), with the underlying issue being improper handli...

Unfixed XSS vulnerability at www.bowenshideout.com

Security researcher SaMTHG, has submitted on 27/10/2008 a cross-site-scripting XSS vulnerability affecting www.bowenshideout.com, which at the time of submission ranked 9572926 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...

miniPortail 2.2 - Cross-Site Scripting Local File Inclusion

miniPortail 2.2 - Cross-Site Scripting Local File Inclusion / miniPortail javascript / milw0rm.com 2008-10-23...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in Ed Pudol Clickbank Portal allows remote attackers to inject arbitrary web script or HTML via the search box. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in Dan Fletcher Recipe Script allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4669

CVE-2008-4669 is a Cross‑site Scripting (XSS) vulnerability in search.php of the Dan Fletcher Recipe Script, exploitable via the keyword parameter to inject arbitrary web script/HTML. The NVD entry lists a CVSS v2 base score of 4.3 (Medium) with network attack vector, required user interaction no...

CVE-2008-4670

The CVE-2008-4670 entry documents a Cross-site scripting (XSS) vulnerability in the search.php component of Ed Pudol Clickbank Portal. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the search box. Affected software is described as Ed Pudol Clickbank Portal; ...

CVE-2008-4121

Multiple cross-site scripting XSS vulnerabilities in cpCommerce before 1.2.4 allow remote attackers to inject arbitrary web script or HTML via 1 the search parameter in a search.quick action to search.php and 2 the name parameter in a sendtofriend action to sendtofriend.php...

Sql injection

SQL injection vulnerability in search.php in iGaming CMS 2.0 Alpha 1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a searchgames action...

iGaming CMS 2.0 Alpha 1 - search.php SQL Injection

iGaming CMS 2.0 Alpha 1 - search.php SQL Injection !/usr/bin/perl ----------------------------------------------------- iGaming CMS 2.0 Alpha 1 Remote SQL Injection Exploit By StAkeR aka athos - StAkeRathotmaildotit On 16/10/2008 http://www.igamingcms.com/iGaming2Alpha.zip...

iGaming CMS 2.0 Alpha 1 (search.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= iGaming CMS 2.0 Alpha 1 search.php Remote SQL Injection Exploit ================================================================= !/usr/bin/perl...

iGaming CMS 2.0 Alpha 1 - 'search.php' SQL Injection

!/usr/bin/perl ----------------------------------------------------- iGaming CMS 2.0 Alpha 1 Remote SQL Injection Exploit By StAkeR aka athos - StAkeRathotmaildotit On 16/10/2008 http://www.igamingcms.com/iGaming2Alpha.zip ----------------------------------------------------- use strict; use...

Unfixed XSS vulnerability at www.lynuxworks.com

Security researcher TheSpecialist, has submitted on 10/07/2008 a cross-site-scripting XSS vulnerability affecting www.lynuxworks.com, which at the time of submission ranked 316251 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/07/2008. It i...

Sql injection

SQL injection vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops might allow remote attackers to execute arbitrary SQL commands via the itemsxpag parameter...

CVE-2008-4365

Cross-site scripting XSS vulnerability in search.php in Siteman 1.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in search.php Attachmax Dolphin 2.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a Search action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2008-4205

CVE-2008-4205 concerns SQL injection in Attachmax Dolphin

BuzzScripts BuzzyWall 'search.php' SQL注入漏洞

BUGTRAQ ID: 31308 CNCAN ID：CNCAN-2008092302 BuzzScripts BuzzyWall是一款基于PHP的WEB应用程序。 BuzzScripts BuzzyWall不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'search.php'脚本对用户提交给'search'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 BuzzScripts BuzzyWall 1.3.1 目前没有解决方案提供：...

CVE-2008-4177

SQL injection vulnerability in search.php in Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the c parameter...

Sql injection

SQL injection vulnerability in search.php in Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the c parameter...