459 matches found
CVE-2008-6439
Cross-site scripting XSS vulnerability in searchresults.php in ABK-Soft AbleDating 2.4 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...
CVE-2008-6439: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in searchresults.php in ABK-Soft AbleDating 2.4 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in search.php in Scripts4Profit DXShopCart 4.30mc allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...
CVE-2008-5119: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.php in Scripts4Profit DXShopCart 4.30mc allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...
CVE-2008-4669
Cross-site scripting XSS vulnerability in search.php in Dan Fletcher Recipe Script allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in search.php in Dan Fletcher Recipe Script allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-4669
Cross-site scripting XSS vulnerability in search.php in Dan Fletcher Recipe Script allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-4669: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.php in Dan Fletcher Recipe Script allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-4532: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in MaxiScript Website Directory allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a search action...
Unfixed XSS vulnerability at www.jugglingdb.com
Security researcher austinator, has submitted on 15/08/2008 a cross-site-scripting XSS vulnerability affecting www.jugglingdb.com, which at the time of submission ranked 264781 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/08/2008. It is...
Cross site scripting
Cross-site scripting XSS vulnerability in search.php in phpInv 0.8.0 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...
CVE-2008-2694: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.php in phpInv 0.8.0 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...
CVE-2008-2644
Multiple cross-site scripting XSS vulnerabilities in SMEWeb 1.4b and 1.4f allow remote attackers to inject arbitrary web script or HTML via the 1 data parameter to catalog.php, the 2 keyword parameter to search.php, the 3 page parameter to bb.php, and the 4 news parameter to order.php...
PT-2007-7428 · Iportalx · Iportalx
Name of the Vulnerable Software and Affected Versions: IPortalX versions prior to Build 033 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The affected API endpoints include...
CVE-2007-4953: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in SimpCMS allows remote attackers to execute arbitrary SQL commands via the keyword parameter in a search site action...
CVE-2007-1050: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in index.php in AbleDesign MyCalendar allow remote attackers to inject arbitrary web script or HTML via 1 the go parameter, 2 the keyword parameter in the search menu go=search, or 3 the username or 4 the password in a go=Login action...
Cross site scripting
Cross-site scripting XSS vulnerability in search.php in 212cafeBoard 0.08 Beta allows remote attackers to inject arbitrary web script or HTML via keyword parameter...
CVE-2007-0550
Cross-site scripting XSS vulnerability in search.php in 212cafeBoard 0.08 Beta allows remote attackers to inject arbitrary web script or HTML via keyword parameter...
CVE-2007-0550: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search.php in 212cafeBoard 0.08 Beta allows remote attackers to inject arbitrary web script or HTML via keyword parameter...