395 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in seeurl.php in Xavier Flahaut URLStreet 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 language, 2 order, and 3 filter parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third...
CVE-2008-6205
CVE-2008-6205: XSS in seeurl.php of Xavier Flahaut URLStreet 1.0, with vulnerability in parameters (language, order, filter) allowing injection of arbitrary script/HTML. The problem is documented by NVD/NIST; no explicit remediation or patch details are provided in the connected documents. The CV...
EJBQL injection via 'order' parameter
The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remote attackers to inject and execute arbitrary EJBQL commands via the order parameter...
EJBQL injection via 'order' parameter
The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remote attackers to inject and execute arbitrary EJBQL commands via the order parameter...
EJBQL injection via 'order' parameter
The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remote attackers to inject and execute arbitrary EJBQL commands via the order parameter...
Design/Logic Flaw
The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remote attackers to inject and execute arbitrary EJBQL commands via the order parameter...
CVE-2007-6433
The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remote attackers to inject and execute arbitrary EJBQL commands via the order parameter...
Joomla! com_content Component 'order' Parameter XSS
The version of Joomla! running on the remote host is affected by a cross-site scripting XSS vulnerability in comcontent/content.php due to improper sanitization of user-supplied input to the 'order' parameter before using it to generate dynamic HTML content. An unauthenticated, remote attacker ca...
LinPHA < 1.3.2 SQL Injection Vulnerability
Binary data 4150.prm...
CVE-2007-2962
Cross-site scripting XSS vulnerability in search.php in Particle Gallery 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the order parameter...
Directory traversal
Directory traversal vulnerability in checkvote.php in Weekly Drawing Contest 0.0.1 allows remote attackers to read arbitrary files via a .. dot dot in the order parameter. NOTE: another researcher disputes this vulnerability, noting that the order variable is not used in any context that allows...
PT-2007-2983 · Unknown · Weekly Drawing Contest
Name of the Vulnerable Software and Affected Versions: Weekly Drawing Contest version 0.0.1 Description: The issue allows remote attackers to potentially read arbitrary files via a .. dot dot in the order parameter in the check vote.php file. However, it is noted that another researcher disputes...
CVE-2006-4871
SQL injection vulnerability in searchrun.asp in Keyvan1 aka Keyvan Janghorbani EShoppingPro 1.0 allows remote attackers to execute arbitrary SQL commands via the order parameter...