CVE-2005-4236

Cross-site scripting XSS vulnerability in search.php in CKGOLD allows remote attackers to inject arbitrary web script or HTML via the search parameters...

CVE-2005-4245: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in Snipe Gallery 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...

CVE-2005-4236: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.php in CKGOLD allows remote attackers to inject arbitrary web script or HTML via the search parameters...

CVE-2005-4240: Undefined Security Weakness

SQL injection vulnerability in search.php in VCD-db 0.98 and earlier allows remote attackers to execute arbitrary SQL commands via the by parameter...

CVE-2005-4231: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Link Up Gold 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via 1 link parameter to tellfriend.php, 2 phrase parameter to search.php in a searchlinksadvanced action, and the 3 direction or 4 sort parameter to articles.php...

CVE-2005-4056

SQL injection vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to execute arbitrary SQL commands via the 1 Location, 2 Last Name, and 3 First Name parameters...

CVE-2005-4057

Cross-site scripting XSS vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to inject arbitrary web script or HTML via the 1 Location, 2 Last Name, and 3 First Name parameters...

CVE-2005-4057

CVE-2005-4057 describes a Cross-site scripting (XSS) vulnerability in the PluggedOut Nexus 0.1 project, specifically in search.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML through the (1) Location, (2) Last Name, and (3) First Name parameters. The entries ...

CVE-2005-4056

CVE-2005-4056 describes a SQL injection vulnerability in the search.php component of PluggedOut Nexus 0.1. The flaw allows remote attackers to manipulate the database by injecting SQL through the Location, Last Name, and First Name parameters. The vulnerability is documented with a high impact po...

CVE-2005-4057: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to inject arbitrary web script or HTML via the 1 Location, 2 Last Name, and 3 First Name parameters...

CVE-2005-4056: Undefined Security Weakness

SQL injection vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to execute arbitrary SQL commands via the 1 Location, 2 Last Name, and 3 First Name parameters...

CVE-2005-4026

search.php in Geeklog 1.4.x before 1.4.0rc1, and 1.3.x before 1.3.11sr3, allows remote attackers to obtain sensitive information via invalid 1 datestart and 2 dateend parameters, which leaks the web server path in an error message...

CVE-2005-4026

search.php in Geeklog 1.4.x before 1.4.0rc1, and 1.3.x before 1.3.11sr3, allows remote attackers to obtain sensitive information via invalid 1 datestart and 2 dateend parameters, which leaks the web server path in an error message...

CVE-2005-4026: Undefined Security Weakness

search.php in Geeklog 1.4.x before 1.4.0rc1, and 1.3.x before 1.3.11sr3, allows remote attackers to obtain sensitive information via invalid 1 datestart and 2 dateend parameters, which leaks the web server path in an error message...

CVE-2005-4010: Undefined Security Weakness

SQL injection vulnerability in KBase Express 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 id parameter to category.php and 2 search parameters to search.php...

CVE-2005-3908: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in GhostScripter Amazon Shop 5.0.0, and other versions before 5.0.2, allows remote attackers to inject web script or HTML via the query parameter...

CVE-2005-3881

SQL injection vulnerability in search.php in AtlantisFAQ Knowledge Base Software 2.03 and earlier allows remote attackers to execute arbitrary SQL commands via the searchStr parameter...

CVE-2005-3881: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in search.php in AtlantisFAQ Knowledge Base Software 2.03 and earlier allows remote attackers to execute arbitrary SQL commands via the searchStr parameter...

KBase Express SQL inj. vuln.

KBase Express SQL inj. vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/kbase-express-sql-inj-vuln.html Vendor:http://www.sensationdesigns.com/products/scripts/kbaseexpress/ affected version: 1.0.0 and prior Product Description: KBase Express ...

CVE-2005-3838

The CVE-2005-3838 issue affects IsolSoft Support Center 2.2 and earlier. Multiple SQL injection vulnerabilities exist in search.php, exploitable via the parameters (1) lorder, (2) Priority, (3) Status, (4) Category, (5) searchvalue, and (6) field to execute arbitrary SQL commands remotely. The pr...