Unfixed XSS vulnerability at www.citrus-gift-baskets.com

Security researcher JustPoDCasT, has submitted on 20/04/2009 a cross-site-scripting XSS vulnerability affecting www.citrus-gift-baskets.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/06/2009. It...

Gentoo Security Advisory GLSA 200406-19 (giFT-FastTrack)

The remote host is missing updates announced in advisory GLSA 200406-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200406-19 (giFT-FastTrack)

The remote host is missing updates announced in advisory GLSA 200406-19. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: giFT-FastTrack

The remote host is missing an update to the system as announced in the referenced advisory. VID 1f738bda-c6ac-11d8-8898-000d6111a684 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: giFT-FastTrack

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Unfixed XSS vulnerability at www.unique-gift-ideas-shop.com

Security researcher xylitol, has submitted on 18/05/2008 a cross-site-scripting XSS vulnerability affecting www.unique-gift-ideas-shop.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/05/2008. It ...

Unfixed XSS vulnerability at the-gift-of-experiences.co.uk

Security researcher Uber0n, has submitted on 02/06/2008 a cross-site-scripting XSS vulnerability affecting the-gift-of-experiences.co.uk, which at the time of submission ranked 21673890 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/06/2008...

CVE-2004-2484

PHP Gift Registry 1.3.5 and earlier contain a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the message parameter to event.php or index.php. The description indicates the vulnerability is triggered through user-supplied input in t...

CVE-2004-2484

Cross-site scripting XSS vulnerability in PHP Gift Registry 1.3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter to 1 event.php or 2 index.php...

CVE-2004-2484: Undefined Security Weakness

Cross-site scripting XSS vulnerability in PHP Gift Registry 1.3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter to 1 event.php or 2 index.php...

CVE-2005-0292

Multiple SQL injection vulnerabilities in index.php in PHP Gift Registry phpGiftReg 1.4.0, and possibly other versions before 1.5.0b1, allow remote attackers to execute arbitrary SQL commands via the 1 messageid, 2 shopper, 3 shopfor, or 4 itemid parameters...

CVE-2005-0292

PHP Gift Registry (phpGiftReg) 1.4.0 (and possibly earlier versions before 1.5.0b1) contains multiple SQL injection vulnerabilities in index.php. The issues allow remote attackers to inject SQL via the parameters messageid, shopper, shopfor, or itemid, potentially enabling arbitrary SQL command e...

CVE-2005-0292: Undefined Security Weakness

Multiple SQL injection vulnerabilities in index.php in PHP Gift Registry phpGiftReg 1.4.0, and possibly other versions before 1.5.0b1, allow remote attackers to execute arbitrary SQL commands via the 1 messageid, 2 shopper, 3 shopfor, or 4 itemid parameters...

CVE-2005-0292

Multiple SQL injection vulnerabilities in index.php in PHP Gift Registry phpGiftReg 1.4.0, and possibly other versions before 1.5.0b1, allow remote attackers to execute arbitrary SQL commands via the 1 messageid, 2 shopper, 3 shopfor, or 4 itemid parameters...

CVE-2004-2484

Cross-site scripting XSS vulnerability in PHP Gift Registry 1.3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter to 1 event.php or 2 index.php...

[SA13414] PHP Gift Registry "message" Cross-Site Scripting Vulnerabilities

TITLE: PHP Gift Registry "message" Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA13414 VERIFY ADVISORY: http://secunia.com/advisories/13414/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: PHP Gift Registry 1.x http://secunia.com/product/4369/...

CVE-2004-0604

The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service crash, possibly via an empty search query, which triggers a NULL dereference...

GLSA-200406-19 : giFT-FastTrack: remote denial of service attack

The remote host is affected by the vulnerability described in GLSA-200406-19 giFT-FastTrack: remote denial of service attack Alan Fitton found a vulnerability in the giFT-FastTrack plugin in version 0.8.6 and earlier. It can be used to remotely crash the giFT daemon. Impact : Attackers may use th...

CVE-2004-0604

The CVE-2004-0604 issue affects giFT-FastTrack up to version 0.8.6 (and earlier), where the HTTP client and server can be triggered remotely to crash via an empty search query, causing a NULL dereference and Denial of Service. Public sources in the connected documents confirm a remote DoS impact ...

CVE-2004-0604

The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service crash, possibly via an empty search query, which triggers a NULL dereference...