756 matches found
CVE-2007-0953: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search.pl in @Mail 4.61 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...
CVE-2006-4947
Cross-site scripting XSS vulnerability in the Drupal 4.7 Search Keywords module before 1.15 2006/09/15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "lack of validation on output."...
CVE-2006-4947
Cross-site scripting XSS vulnerability in the Drupal 4.7 Search Keywords module before 1.15 2006/09/15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "lack of validation on output."...
CVE-2006-4947: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the Drupal 4.7 Search Keywords module before 1.15 2006/09/15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "lack of validation on output."...
[SA22021] Drupal Search Keywords Module Script Insertion
TITLE: Drupal Search Keywords Module Script Insertion SECUNIA ADVISORY ID: SA22021 VERIFY ADVISORY: http://secunia.com/advisories/22021/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Search Keywords 4.x module for Drupal http://secunia.com/product/12050/...
Search Keywords cross site scripting vulnerability
It is possible for a malicious user to insert and execute XSS Cross Site Scripting, due to lack of validation on output. This may lead to administrator access if certain conditions are met. Learn more about XSS on Wikipedia. Versions affected Drupal core is not affected. If you do not use the...
CVE-2006-4327: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in addurl.php in CloudNine Interactive Links Manager 2006-06-12 allow remote attackers to inject arbitrary web script or HTML via the 1 title, 2 description, or 3 keywords parameters...
CVE-2006-4086
Cross-site scripting XSS vulnerability in index.php in Elaine Aquino Online Zone Journals OZJournals 1.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party...
CVE-2006-4086
Cross-site scripting XSS vulnerability in index.php in Elaine Aquino Online Zone Journals OZJournals 1.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party...
CVE-2006-4086: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in Elaine Aquino Online Zone Journals OZJournals 1.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party...
I'm on the web the back door of some of the views-bug warning-the black bar safety net
Since the lake2 out of the back door sweep horse program later, Backdoor survival rate could be greatly reduced, alas, no way, who told people so badly?, a program to get so many ponies, the poor newbies, I leave the back door all of a sudden the whole is exposed. This sweep of the mA program is...
CVE-2006-3071
Cross-site scripting XSS vulnerability in index.php in MP3 Search/Archive 1.2 allows remote attackers to inject arbitrary web script or HTML via the 1 keywords parameter, as used by the "search box", and 2 res parameter...
CVE-2006-3071: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in MP3 Search/Archive 1.2 allows remote attackers to inject arbitrary web script or HTML via the 1 keywords parameter, as used by the "search box", and 2 res parameter...
Timberland Search XSS Vulnerability
There's a vulnerability in Timberland's search engine. The variable 'keywords' in searchHandler/index.jsp is not correctly sanitized. URL: hxxp://www.timberland.com/searchHandler/index.jsp?keywords=XSS Code Example:...
CVE-2006-2046: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 category and 2 keywords parameters in a Results.cfm, and the 3 ProdID parameter in b Details.cfm...
CVE-2006-1438
The CVE-2006-1438 entry corresponds to multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (aphpkb) 0.57. The affected components are PHP pages and parameters: (a) index.php via keyword_list, (b) submit_article.php via title, article, author, keywords, and (c) submit_q...
CVE-2006-1405
Cross-site scripting XSS vulnerability in search.aspx in SweetSuite.NET Content Management System ssCMS 2.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...
CVE-2006-1405: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search.aspx in SweetSuite.NET Content Management System ssCMS 2.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in search.php in MyBB aka MyBulletinBoard 1.0.2 allows remote attackers with knowledge of the table prefix to inject arbitrary web script or HTML via a URL encoded value of the keywords parameter, as demonstrated by %3Cscript%3E...
CVE-2006-0639: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search.php in MyBB aka MyBulletinBoard 1.0.2 allows remote attackers with knowledge of the table prefix to inject arbitrary web script or HTML via a URL encoded value of the keywords parameter, as demonstrated by %3Cscript%3E...