CVE-2008-2212

CVE-2008-2212 affects Maian Cart 1.1 with multiple cross-site scripting (XSS) vulnerabilities. The flaws allow remote attackers to inject arbitrary script/HTML via: (1) msg_adminheader, (2) msg_adminheader2, (3) msg_adminheader3, (4) msg_adminheader4 in admin/inc/header.php; (5) msg_script3 and o...

[SECURITY] Fedora 8 Update: kronolith-2.1.7-1.fc8

Kronolith is the Horde calendar application. It provides repeating events, all-day events, custom fields, keywords, and managing multiple users through Horde Authentication. The calendar API that Kronolith uses is abstracted; MCAL and SQL drivers are currently provided. The Horde Project writes w...

[SECURITY] Fedora 7 Update: kronolith-2.1.7-1.fc7

Kronolith is the Horde calendar application. It provides repeating events, all-day events, custom fields, keywords, and managing multiple users through Horde Authentication. The calendar API that Kronolith uses is abstracted; MCAL and SQL drivers are currently provided. The Horde Project writes w...

Cross site scripting

Cross-site scripting XSS vulnerability in search.pl in Dansie Search Engine 2.7 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-0257

Cross-site scripting XSS vulnerability in search.pl in Dansie Search Engine 2.7 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-5943

Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...

CVE-2006-7209

Multiple cross-site scripting XSS vulnerabilities in phpTrafficA before 1.2beta2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to keywords results in the 1 main, 2 daily, 3 weekly, 4 monthly, 5 new trends, 6 individual page, and 7 search engine...

CVE-2006-7209

Multiple cross-site scripting XSS vulnerabilities in phpTrafficA before 1.2beta2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to keywords results in the 1 main, 2 daily, 3 weekly, 4 monthly, 5 new trends, 6 individual page, and 7 search engine...

CVE-2007-0953

Cross-site scripting XSS vulnerability in search.pl in @Mail 4.61 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

CVE-2006-4947

Cross-site scripting XSS vulnerability in the Drupal 4.7 Search Keywords module before 1.15 2006/09/15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "lack of validation on output."...

CVE-2006-4947

Cross-site scripting XSS vulnerability in the Drupal 4.7 Search Keywords module before 1.15 2006/09/15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "lack of validation on output."...

[SA22021] Drupal Search Keywords Module Script Insertion

TITLE: Drupal Search Keywords Module Script Insertion SECUNIA ADVISORY ID: SA22021 VERIFY ADVISORY: http://secunia.com/advisories/22021/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Search Keywords 4.x module for Drupal http://secunia.com/product/12050/...

Search Keywords cross site scripting vulnerability

It is possible for a malicious user to insert and execute XSS Cross Site Scripting, due to lack of validation on output. This may lead to administrator access if certain conditions are met. Learn more about XSS on Wikipedia. Versions affected Drupal core is not affected. If you do not use the...

CVE-2006-4086

Cross-site scripting XSS vulnerability in index.php in Elaine Aquino Online Zone Journals OZJournals 1.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party...

CVE-2006-4086

Cross-site scripting XSS vulnerability in index.php in Elaine Aquino Online Zone Journals OZJournals 1.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party...

I'm on the web the back door of some of the views-bug warning-the black bar safety net

Since the lake2 out of the back door sweep horse program later, Backdoor survival rate could be greatly reduced, alas, no way, who told people so badly?, a program to get so many ponies, the poor newbies, I leave the back door all of a sudden the whole is exposed. This sweep of the mA program is...

CVE-2006-3071

Cross-site scripting XSS vulnerability in index.php in MP3 Search/Archive 1.2 allows remote attackers to inject arbitrary web script or HTML via the 1 keywords parameter, as used by the "search box", and 2 res parameter...

Timberland Search XSS Vulnerability

There's a vulnerability in Timberland's search engine. The variable 'keywords' in searchHandler/index.jsp is not correctly sanitized. URL: hxxp://www.timberland.com/searchHandler/index.jsp?keywords=XSS Code Example:...

CVE-2006-1438

The CVE-2006-1438 entry corresponds to multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (aphpkb) 0.57. The affected components are PHP pages and parameters: (a) index.php via keyword_list, (b) submit_article.php via title, article, author, keywords, and (c) submit_q...

CVE-2006-1405

Cross-site scripting XSS vulnerability in search.aspx in SweetSuite.NET Content Management System ssCMS 2.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...