2324 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in search.php in Ed Pudol Clickbank Portal allows remote attackers to inject arbitrary web script or HTML via the search box. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in search.php in Dan Fletcher Recipe Script allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-4670
The CVE-2008-4670 entry documents a Cross-site scripting (XSS) vulnerability in the search.php component of Ed Pudol Clickbank Portal. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the search box. Affected software is described as Ed Pudol Clickbank Portal; ...
CVE-2008-4669
CVE-2008-4669 is a Cross‑site Scripting (XSS) vulnerability in search.php of the Dan Fletcher Recipe Script, exploitable via the keyword parameter to inject arbitrary web script/HTML. The NVD entry lists a CVSS v2 base score of 4.3 (Medium) with network attack vector, required user interaction no...
CVE-2008-4670: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.php in Ed Pudol Clickbank Portal allows remote attackers to inject arbitrary web script or HTML via the search box. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-4669: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.php in Dan Fletcher Recipe Script allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-4121
Multiple cross-site scripting XSS vulnerabilities in cpCommerce before 1.2.4 allow remote attackers to inject arbitrary web script or HTML via 1 the search parameter in a search.quick action to search.php and 2 the name parameter in a sendtofriend action to sendtofriend.php...
CVE-2008-4121: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in cpCommerce before 1.2.4 allow remote attackers to inject arbitrary web script or HTML via 1 the search parameter in a search.quick action to search.php and 2 the name parameter in a sendtofriend action to sendtofriend.php...
Sql injection
SQL injection vulnerability in search.php in iGaming CMS 2.0 Alpha 1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a searchgames action...
CVE-2008-4603: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in search.php in iGaming CMS 2.0 Alpha 1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a searchgames action...
iGaming CMS 2.0 Alpha 1 (search.php) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================= iGaming CMS 2.0 Alpha 1 search.php Remote SQL Injection Exploit ================================================================= !/usr/bin/perl...
iGaming CMS 2.0 Alpha 1 - search.php SQL Injection
iGaming CMS 2.0 Alpha 1 - search.php SQL Injection !/usr/bin/perl ----------------------------------------------------- iGaming CMS 2.0 Alpha 1 Remote SQL Injection Exploit By StAkeR aka athos - StAkeRathotmaildotit On 16/10/2008 http://www.igamingcms.com/iGaming2Alpha.zip...
iGaming CMS 2.0 Alpha 1 - 'search.php' SQL Injection
!/usr/bin/perl ----------------------------------------------------- iGaming CMS 2.0 Alpha 1 Remote SQL Injection Exploit By StAkeR aka athos - StAkeRathotmaildotit On 16/10/2008 http://www.igamingcms.com/iGaming2Alpha.zip ----------------------------------------------------- use strict; use...
Unfixed XSS vulnerability at www.lynuxworks.com
Security researcher TheSpecialist, has submitted on 10/07/2008 a cross-site-scripting XSS vulnerability affecting www.lynuxworks.com, which at the time of submission ranked 316251 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/07/2008. It i...
Sql injection
SQL injection vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops might allow remote attackers to execute arbitrary SQL commands via the itemsxpag parameter...
CVE-2008-4432: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops allows remote attackers to inject arbitrary web script or HTML via the itemsxpag parameter...
CVE-2008-4435: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the RMSOFT Downloads Plus rmdp module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the 1 key parameter to search.php and the 2 id parameter to down.php...
CVE-2008-4438: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.php in Datafeed Studio 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-4433: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops might allow remote attackers to execute arbitrary SQL commands via the itemsxpag parameter...
CVE-2008-4365
Cross-site scripting XSS vulnerability in search.php in Siteman 1.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...