1679 matches found
CVE-2006-3000
Cross-site scripting XSS vulnerability in search.php in OkScripts OkArticles 1.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2006-2883
CVE-2006-2883 concerns a cross-site scripting (XSS) vulnerability in Kmita FAQ 1.0’s search.php. The issue allows remote attackers to inject arbitrary web script or HTML via the q parameter. The vulnerability affects the search function and is documented with a CVSS 2.0 base score of 4.3 (Medium)...
CVE-2006-2883
Cross-site scripting XSS vulnerability in search.php in Kmita FAQ 1.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...
LabWiki v1.0
LabWiki 1.0 Homepage: http://www.bioinformatics.org/phplabware/labwiki/index.php Effected files: search.php The search input box does not sanatize user input before dynamically genrating it. XSS Proof of concept: "SCRIPT SRC=http://evilsite.com/xss.js/SCRIPT"...
CVE-2006-2827
SQL injection vulnerability in search.php in X-Cart Gold and Pro 4.0.18, and X-Cart 4.1.0 beta 1, allows remote attackers to execute arbitrary SQL commands via the "Search for pattern" field, when the settings specify only "Search in Detailed description" and "Search also in ISBN." NOTE: the vend...
CVE-2006-2827
SQL injection vulnerability in search.php in X-Cart Gold and Pro 4.0.18, and X-Cart 4.1.0 beta 1, allows remote attackers to execute arbitrary SQL commands via the "Search for pattern" field, when the settings specify only "Search in Detailed description" and "Search also in ISBN." NOTE: the vend...
Cross site scripting
Cross-site scripting XSS vulnerability in search.php in QontentOne CMS allows remote attackers to inject arbitrary web script or HTML via the searchphrase parameter...
Sql injection
SQL injection vulnerability in search.php in Open Searchable Image Catalogue OSIC 0.7.0.1 and earlier allows remote attackers to inject arbitrary SQL commands via the 1 txtCustomField and 2 CustomFieldID array parameters...
Remote file inclusion
PHP remote file inclusion vulnerability in Fastpublish CMS 1.6.9.d allows remote attackers to include arbitrary files via the configfsBase parameter in 1 drucken.php, 2 drucken2.php, 3 emailanbenutzer.php, 4 rechnung.php, 5 suche/search.php and 6 adminbereich/admin.php...
CVE-2006-2726
PHP remote file inclusion vulnerability in Fastpublish CMS 1.6.9.d allows remote attackers to include arbitrary files via the configfsBase parameter in 1 drucken.php, 2 drucken2.php, 3 emailanbenutzer.php, 4 rechnung.php, 5 suche/search.php and 6 adminbereich/admin.php...
CVE-2006-2751
The CVE-2006-2751 entry describes a cross-site scripting (XSS) vulnerability in Open Searchable Image Catalogue (OSIC) versions up to 0.7.0.1 and earlier. The affected component is the search.php handler where the item_list parameter is used in a way that allows remote attackers to inject arbitra...
CVE-2006-2749
CVE-2006-2749 is a SQL injection vulnerability in the Open Searchable Image Catalogue (OSIC) before or equal to 0.7.0.1, specifically in search.php. The underlying flaw allows remote attackers to inject arbitrary SQL via the (1) txtCustomField and (2) CustomFieldID array parameters. Affected prod...
CVE-2006-2749
SQL injection vulnerability in search.php in Open Searchable Image Catalogue OSIC 0.7.0.1 and earlier allows remote attackers to inject arbitrary SQL commands via the 1 txtCustomField and 2 CustomFieldID array parameters...
QontentOneCMS v1.0
QontentOneCMS v1.0 homepage: http://www.qontentone.com/ Effected files: search.php input forms XSS Proof of concept: http://www.example.com/search.php?searchphrase="SCRIPT SRC=http://www.evilsite.com/xss.js/SCRIPT"&search=Search...
CVE-2006-2650
The CVE-2006-2650 entry documents an SQL injection in CosmicShoppingCart, specifically in cosmicshop/search.php, exploitable via the max parameter. The vulnerability allows remote attackers to craft arbitrary SQL commands executed by the database. The affected component is the search functionalit...
CosmicShoppingCart - 'search.php' SQL Injection
Software: CosmicShoppingCart www.cosmicphp.com Risk: Medium Discovered by: Vympel Marcelo Almeida Background: CosmicShoppingCart is a PHP / MySQL e-commerce system. It is a fully customizable, shopping cart designed. SQL injections have been found, they could be exploited by users to retrieve the...
CosmicShoppingCart - search.php SQL Injection
CosmicShoppingCart - search.php SQL Injection Software: CosmicShoppingCart www.cosmicphp.com Risk: Medium Discovered by: Vympel Marcelo Almeida Background: CosmicShoppingCart is a PHP / MySQL e-commerce system. It is a fully customizable, shopping cart designed. SQL injections have been found, th...
ipb search.php vulnerability analysis and thinking-vulnerability warning-the black bar safety net
Author: SuperHeiAtph4nt0m.org Blog: http://superhei.blogbus.com/ Team: http://www.ph4nt0m.org Data: 2006-04-27 Simple analysis The vulnerability is another one of pregreplace+/e vulnerability,代码 在 \sources\actionadmin\search.php line 1 2 5 8-1 2 6 a 2: if $this-ipsclass-input'lastdate' $this-outp...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in search.php in Sphider allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO and 2 the category parameter...