615 matches found
SLES9: Security update for PHP4
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: php4-imap php4-readline php4-iconv php4-servlet apache2-modphp4 php4-gd php4-sysvshm php4-pear php4-xslt php4-zlib php4-mcal php4-yp php4-wddx modphp4...
CVE-2009-3337
SQL injection vulnerability in the Freetag serendipityeventfreetag plugin before 3.09 for Serendipity S9Y allows remote attackers to execute arbitrary SQL commands via an unspecified parameter associated with Meta keywords in a blog entry...
Sql injection
SQL injection vulnerability in the Freetag serendipityeventfreetag plugin before 3.09 for Serendipity S9Y allows remote attackers to execute arbitrary SQL commands via an unspecified parameter associated with Meta keywords in a blog entry...
CVE-2009-3337
SQL injection vulnerability in the Freetag serendipityeventfreetag plugin before 3.09 for Serendipity S9Y allows remote attackers to execute arbitrary SQL commands via an unspecified parameter associated with Meta keywords in a blog entry...
AccessoriesMe PHP Affiliate Script 1.4 - Blind SQL Injection / Cross-Site Scripting
/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || AccessoriesMe PHP Affiliate Script v1.4 bSQL-XSS Multiple Remote Vulnerabilities Discovered By : Moudi Contact : Download :...
Sql injection
SQL injection vulnerability in the News Page module 5.x before 5.x-1.2 for Drupal allows remote authenticated users, with News Page nodes create and edit privileges, to execute arbitrary SQL commands via the Include Words aka keywords field...
SA-CONTRIB-2009-023 - News Page - SQL injection
The News Page module provides a node content type which displays feed items from an aggregator category, filtered by keywords entered into the 'Include Words' field of the node. Unfortunately the News Page module uses keywords directly in SQL queries without being sanitized, allowing SQL injectio...
CVE-2009-1321
Cross-site scripting XSS vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...
CVE-2009-1321
Cross-site scripting XSS vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...
ASP Product Catalog 1.0 (XSS/DD) Multiple Remote Exploits
Exploit for unknown platform in category web applications ========================================================= ASP Product Catalog 1.0 XSS/DD Multiple Remote Exploits ========================================================= !/usr/bin/perl By AlpHaNiX NullArea.Net Made in Tunisia script : AS...
CVE-2008-6654
Cross-site scripting XSS vulnerability in searchresults.php in InfoBiz Server allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...
CVE-2009-1225
Cross-site scripting XSS vulnerability in index.php in Turnkey Ebook Store 1.1 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search action...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in Turnkey Ebook Store 1.1 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search action...
CVE-2008-6433
Cross-site scripting XSS vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search action...
CVE-2009-0483
Cross-site request forgery CSRF vulnerability in Bugzilla 2.22 before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote attackers to delete keywords and user preferences via a link or IMG tag to 1 editkeywords.cgi or 2 userprefs.cgi...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Bugzilla 2.22 before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote attackers to delete keywords and user preferences via a link or IMG tag to 1 editkeywords.cgi or 2 userprefs.cgi...
CVE-2009-0483
Cross-site request forgery CSRF vulnerability in Bugzilla 2.22 before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote attackers to delete keywords and user preferences via a link or IMG tag to 1 editkeywords.cgi or 2 userprefs.cgi...
CVE-2009-0483
CVE-2009-0483 describes a Cross-site request forgery (CSRF) vulnerability in Bugzilla versions 2.22 before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2. The flaw allows remote attackers to delete keywords and user preferences by delivering a crafted link or IMG tag to editkeyw...
CVE-2009-0483
Cross-site request forgery CSRF vulnerability in Bugzilla 2.22 before 2.22.7, 3.0 before 3.0.7, 3.2 before 3.2.1, and 3.3 before 3.3.2 allows remote attackers to delete keywords and user preferences via a link or IMG tag to 1 editkeywords.cgi or 2 userprefs.cgi...