CVE-2014-8381

Multiple cross-site scripting XSS vulnerabilities in Megapolis.Portal Manager allow remote attackers to inject arbitrary web script or HTML via the 1 dateFrom or 2 dateTo parameter...

Unfixed XSS vulnerability at mirrorhaber.org

Security researcher st@rext, has submitted on 23/08/2007 a cross-site-scripting XSS vulnerability affecting mirrorhaber.org, which at the time of submission ranked 1341149 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/08/2007. It is...

CVE-2006-1930

Multiple SQL injection vulnerabilities in userscript.php in Green Minute 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 huserid, 2 pituus, or 3 date parameters. NOTE: this issue has been disputed by the vendor, saying "those parameters mentioned ARE checked...

CVE-2005-4026

search.php in Geeklog 1.4.x before 1.4.0rc1, and 1.3.x before 1.3.11sr3, allows remote attackers to obtain sensitive information via invalid 1 datestart and 2 dateend parameters, which leaks the web server path in an error message...

CVE-2005-3686

SQL injection vulnerability in search.inc.php in Unclassified NewsBoard before 1.5.3 Patch 4 allows remote attackers to execute arbitrary SQL commands via the 1 DateFrom or 2 DateUntil parameter to forum.php...