CVE-2007-4953: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in SimpCMS allows remote attackers to execute arbitrary SQL commands via the keyword parameter in a search site action...

CVE-2007-1050: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in AbleDesign MyCalendar allow remote attackers to inject arbitrary web script or HTML via 1 the go parameter, 2 the keyword parameter in the search menu go=search, or 3 the username or 4 the password in a go=Login action...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in 212cafeBoard 0.08 Beta allows remote attackers to inject arbitrary web script or HTML via keyword parameter...

CVE-2007-0550

Cross-site scripting XSS vulnerability in search.php in 212cafeBoard 0.08 Beta allows remote attackers to inject arbitrary web script or HTML via keyword parameter...

CVE-2007-0550: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.php in 212cafeBoard 0.08 Beta allows remote attackers to inject arbitrary web script or HTML via keyword parameter...

Sql injection

SQL injection vulnerability in admin/memberlist.php in Easebay Resources Paypal Subscription Manager allows remote attackers to execute arbitrary SQL commands via the keyword parameter...

CVE-2007-0400: Undefined Security Weakness

Cross-site scripting XSS vulnerability in admin/memberlist.php in Easebay Resources Login Manager 3.0 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...

CVE-2007-0403: Undefined Security Weakness

SQL injection vulnerability in admin/memberlist.php in Easebay Resources Paypal Subscription Manager allows remote attackers to execute arbitrary SQL commands via the keyword parameter...

CVE-2006-6380: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.asp in Ultimate HelpDesk allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...

CVE-2006-4872: Undefined Security Weakness

SQL injection vulnerability in search.asp in Keyvan1 aka Keyvan Janghorbani ECardPro 2.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter...

CVE-2006-3476

Cross-site scripting XSS vulnerability in comments.php in PhpWebGallery 1.5.2 and earlier, and possibly 1.6.0, allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...

CVE-2006-3476

Cross-site scripting XSS vulnerability in comments.php in PhpWebGallery 1.5.2 and earlier, and possibly 1.6.0, allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...

CVE-2006-3476: Undefined Security Weakness

Cross-site scripting XSS vulnerability in comments.php in PhpWebGallery 1.5.2 and earlier, and possibly 1.6.0, allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...

CVE-2006-3313

Cross-site scripting XSS vulnerability in search.jsp in Netsoft smartNet 2.0 allows remote attackers to inject arbitrary web script or HTML via the keyWord parameter...

CVE-2006-3313

Cross-site scripting XSS vulnerability in search.jsp in Netsoft smartNet 2.0 allows remote attackers to inject arbitrary web script or HTML via the keyWord parameter...

PT-2006-4206 · Netsoft · Smartnet

Name of the Vulnerable Software and Affected Versions: Netsoft smartNet version 2.0 Description: The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the keyWord parameter in the "search.jsp" file. Recommendations:...

CVE-2006-3313: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.jsp in Netsoft smartNet 2.0 allows remote attackers to inject arbitrary web script or HTML via the keyWord parameter...

CVE-2006-2988

Cross-site scripting XSS vulnerability in dictionary.php in Chemical Dictionary allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a browse action...

CVE-2006-2988

Cross-site scripting XSS vulnerability in dictionary.php in Chemical Dictionary allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a browse action...

CVE-2006-3004: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Ez Ringtone Manager allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter in player.php and 2 keyword parameter when performing a search...