Unfixed XSS vulnerability at www.desertluxuryrealty.com

Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.desertluxuryrealty.com, which at the time of submission ranked 21840023 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/09/2009. It ...

dotCMS search-results.dot search_query Parameter XSS

The remote host is using dotCMS, an open source J2EE / Java web content management system. The version of dotCMS installed on the remote host fails to sanitize input to the 'searchquery' parameter of the 'search-results.dot' script before using it to generate dynamic HTML output. An attacker may ...

Cross site scripting

Cross-site scripting XSS vulnerability in searchresults.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: some of these details are obtained from third party information. NOTE: it was later reported that 1.2.3 is...

CVE-2008-2335: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in searchresults.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: some of these details are obtained from third party information. NOTE: it was later reported that 1.2.3 is...

Sphider query参数跨站脚本漏洞

BUGTRAQ ID: 29074 Sphider是基于PHP的开源搜索引擎爬虫程序。 Sphider支持搜索建议功能，如果用户在搜索输入中存在笔误的话，该功能会返回“Did you mean xyz?”。当启用了搜索建议功能的时候，Sphider的search.php文件中没有正确地过滤对query参数的输入便返回给了用户，这允许攻击者通过提交恶意的查询请求执行跨站脚本攻击。 Ando Saabas Sphider 1.3.4 Ando Saabas ----------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2008-1953

Cross-site scripting XSS vulnerability in the Sitedesigner before 1.1.5 search template in Magnolia Enterprise Edition allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2008-1953

Cross-site scripting XSS vulnerability in the Sitedesigner before 1.1.5 search template in Magnolia Enterprise Edition allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2008-1953: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Sitedesigner before 1.1.5 search template in Magnolia Enterprise Edition allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

Cross site scripting

Cross-site scripting XSS vulnerability in Search.do in ManageEngine Applications Manager 8.x allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-1566: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Search.do in ManageEngine Applications Manager 8.x allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-1509: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in XLPortal 2.2.4 and earlier allows remote attackers to execute arbitrary SQL commands via the query parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in SNewsCMS Rus 2.1 through 2.4 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2008-1413: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in SNewsCMS Rus 2.1 through 2.4 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2008-1326

Cross-site scripting XSS vulnerability in search.php in Gallarific allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-1326: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in Gallarific allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Unfixed XSS vulnerability at super.balsas.lt

Security researcher F3nix, has submitted on 03/03/2008 a cross-site-scripting XSS vulnerability affecting super.balsas.lt, which at the time of submission ranked 19403 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is currently...

CVE-2008-1076

Cross-site scripting XSS vulnerability in search.php in Interspire Shopping Cart 1.x allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Unfixed XSS vulnerability at www.ltu.se

Security researcher Uber0n, has submitted on 14/11/2007 a cross-site-scripting XSS vulnerability affecting www.ltu.se, which at the time of submission ranked 46482 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is currently...

CVE-2003-1519

Cross-site scripting XSS vulnerability in Vivisimo clustering engine allows remote attackers to inject arbitrary web script or HTML via the query parameter to the search program...

CVE-2003-1519: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Vivisimo clustering engine allows remote attackers to inject arbitrary web script or HTML via the query parameter to the search program...