2321 matches found
CVE-2006-0101
Multiple cross-site scripting XSS vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 p and 2 keyword parameters in a index.php and b search.php...
CVE-2006-0101: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 p and 2 keyword parameters in a index.php and b search.php...
CVE-2005-4611: Undefined Security Weakness
SQL injection vulnerability in search.php in Free ClickBank 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the keywords parameter...
Sql injection
SQL injection vulnerability in Primo Cart 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 q parameter to search.php and 2 email parameter to user.php...
CVE-2006-0068
SQL injection vulnerability in Primo Cart 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 q parameter to search.php and 2 email parameter to user.php...
CVE-2006-0068
SQL injection vulnerability in Primo Cart 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 q parameter to search.php and 2 email parameter to user.php...
CVE-2006-0068: Undefined Security Weakness
SQL injection vulnerability in Primo Cart 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 q parameter to search.php and 2 email parameter to user.php...
CVE-2005-4642
Multiple cross-site scripting XSS vulnerabilities in HydroBB 1.0.0 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to 1 search.php, 2 members.php, 3 stats.php, 4 viewforum.php, 5 register.php, 6 usercp.php, 7 groups.php, 8 pms.php, and 9 calendar.php...
CVE-2005-4546
search.php in eggblog 2.0 allows remote attackers to obtain the full path via an invalid q parameter, as used by the Keyword and Search fields, possibly due to an SQL injection vulnerability...
CVE-2005-4546
CVE-2005-4546 affects eggblog 2.0: the search.php module exposes the server full path to remote attackers via an invalid q parameter, with the description suggesting a possible SQL injection trigger. The concrete impact stated is path disclosure; no additional exploit details are provided in the ...
CVE-2005-4547
The vulnerability is a Cross-site Scripting (XSS) issue in eggblog 2.0, specifically in home/search.php, where the q parameter used by Keyword and Search fields can allow remote attackers to execute arbitrary SQL commands. The description notes XSS as the vulnerability type but the impact is stat...
CVE-2005-4546: Undefined Security Weakness
search.php in eggblog 2.0 allows remote attackers to obtain the full path via an invalid q parameter, as used by the Keyword and Search fields, possibly due to an SQL injection vulnerability...
CVE-2005-4547: Undefined Security Weakness
Cross-site scripting XSS vulnerability in home/search.php in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the q parameter, as used by the Keyword and Search fields...
CVE-2005-4433: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search.php in Esselbach Storyteller CMS 1.8 allows remote attackers to inject arbitrary web script or HTML via the query parameter, which is used by the Search field...
CVE-2005-4431: Undefined Security Weakness
SQL injection vulnerability in WowBB 1.65 allows remote attackers to execute arbitrary SQL commands via the q parameter to search.php. NOTE: the viewuser.php/sortby vector is already covered by CVE-2005-1554 and CVE-2004-2181...
CVE-2005-4236
Cross-site scripting XSS vulnerability in search.php in CKGOLD allows remote attackers to inject arbitrary web script or HTML via the search parameters...
CVE-2005-4236
CVE-2005-4236 concerns an XSS vulnerability in the CKGOLD package, specifically in the search.php component. The issue allows remote attackers to inject arbitrary web script or HTML through the search parameters, enabling cross-site scripting. The available connected records confirm the flaw as a...
CVE-2005-4240
Vulnerability details (CVE-2005-4240): Affected software is VCD-db 0.98 and earlier. The issue is an SQL injection in search.php via the by parameter, allowing remote attackers to execute arbitrary SQL commands. Impact is stated as partial confidentiality/integrity/availability (per CVSS), with n...
CVE-2005-4245
CVE-2005-4245 is a cross-site scripting (XSS) vulnerability in Snipe Gallery 3.1.4 and earlier affecting the file search.php . The issue arises from the keyword parameter, allowing remote attackers to inject arbitrary web script or HTML. According to the record, the impact is confidentiality: non...