CVE-2005-4420: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Honeycomb Archive Enterprise 3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the keyword parameter in search.cfm...

CVE-2005-4245: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in Snipe Gallery 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...

CVE-2005-4237: Undefined Security Weakness

Cross-site scripting XSS vulnerability in MySQL Auction 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the keyword parameter in the SearchZoom module...

CVE-2005-4036

Cross-site scripting XSS vulnerability in index.cgi in Web4Future KeyWord Frequency Counter 1.0 allows remote attackers to inject arbitrary web script or HTML via the "remote URL."...

CVE-2005-4036

CVE-2005-4036 is a cross-site scripting (XSS) vulnerability in Web4Future Keyword Frequency Counter 1.0, exploitable via the remote URL parameter sent to index.cgi. The NVD summary states an attacker can inject arbitrary script/HTML, impacting integrity (partial) but with no confidentiality or av...

CVE-2005-4036: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.cgi in Web4Future KeyWord Frequency Counter 1.0 allows remote attackers to inject arbitrary web script or HTML via the "remote URL."...

CVE-2005-3851: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.asp in Online Attendance System OASYS Lite 1.0 allows remote attackers to inject arbitrary web script or HTML via certain search parameters, possibly the keyword parameter...

CVE-2005-3852: Undefined Security Weakness

SQL injection vulnerability in search.asp in Online Work Order Suite OWOS Lite Edition for ASP 3.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter...

CVE-2005-2063

Multiple cross-site scripting XSS vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 Title parameter to sendpassword.asp or 2 Keyword field in search.asp...

CVE-2005-2063

Multiple cross-site scripting XSS vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 Title parameter to sendpassword.asp or 2 Keyword field in search.asp...

CVE-2005-0995

Multiple cross-site scripting XSS vulnerabilities in ProductCart 2.7 allow remote attackers to inject arbitrary web script or HTML via 1 the keyword parameter to advSearchh.asp, 2 the redirectUrl parameter to NewCust.asp, 3 the country parameter to storelocatorsubmit.asp, or 4 the error parameter...

CVE-2005-0924

Cross-site scripting XSS vulnerability in Adventia E-Data 2.0 allows remote attackers to inject arbitrary web script or HTML via a query keyword...

CVE-2005-0924

Cross-site scripting XSS vulnerability in Adventia E-Data 2.0 allows remote attackers to inject arbitrary web script or HTML via a query keyword...

CVE-2005-0924

CVE-2005-0924 describes a cross-site scripting (XSS) vulnerability in Adventia E-Data 2.0. The issue allows remote attackers to inject arbitrary web script or HTML via a query keyword in the web interface. Documented impact is limited to partial integrity impact and does not indicate exploitation...

CVE-2005-0924: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Adventia E-Data 2.0 allows remote attackers to inject arbitrary web script or HTML via a query keyword...

CVE-2004-1633

processbug.cgi in Bugzilla 2.9 through 2.18rc2 and 2.19 from CVS does not check edit permissions on the keywords field, which allows remote authenticated users to modify the keywords in a bug via the keywordaction parameter...

sBLOG <= 0.7.2 search.php keyword Parameter SQL Injection

Binary data 3528.prm...

Netgear RP114 URL filter fails if URL is too long

Hi! Netgear has some small router and firewalling devices for home users and small companies SOHO. Most of these solutions are able to do a simple keyword based URL filtering. Lets say we don't want users to visit http://www.scip.ch so we create a filter for the keyword "scip.ch". If a user wants...

CVE-2001-0865

Cisco 12000 Series Routers (IOS 12.0) with Engine 2 line cards are affected by CVE-2001-0865. The issue is that the outgoing ACL implementation does not support the fragment keyword, potentially allowing fragmented packets to bypass the ACL as configured (violation of intended access). The descri...

CVE-2001-0863: Undefined Security Weakness

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not handle the "fragment" keyword in a compiled ACL Turbo ACL for packets that are sent to the router, which allows remote attackers to cause a denial of service via a flood of fragments...