918 matches found
Unfixed XSS vulnerability at www.e-center.gr
Security researcher St@R-gaZ3r, has submitted on 10/11/2007 a cross-site-scripting XSS vulnerability affecting www.e-center.gr, which at the time of submission ranked 5812734 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/11/2007. It is...
CVE-2007-4434
Cross-site scripting XSS vulnerability in textfilesearch.asp in the Text File Search ASP Classic edition allows remote attackers to inject arbitrary web script or HTML via the query parameter...
CVE-2007-3485
Multiple cross-site scripting XSS vulnerabilities in Yandex.Server allow remote attackers to inject arbitrary web script or HTML via the 1 query or 2 within parameter to the default URI...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Yandex.Server allow remote attackers to inject arbitrary web script or HTML via the 1 query or 2 within parameter to the default URI...
CVE-2007-2913
Cross-site scripting XSS vulnerability in index.php in ClonusWiki .5 allows remote attackers to inject arbitrary web script or HTML via the query parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in ClonusWiki .5 allows remote attackers to inject arbitrary web script or HTML via the query parameter...
CVE-2007-2913
Cross-site scripting XSS vulnerability in index.php in ClonusWiki .5 allows remote attackers to inject arbitrary web script or HTML via the query parameter...
CVE-2007-1515
Multiple cross-site scripting XSS vulnerabilities in Horde IMP H3 4.1.3, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via 1 the email Subject header in thread.php, 2 the editquery parameter in search.php, or other unspecified parameters in search.php. NOTE:...
CVE-2006-5643
Cross-site scripting XSS vulnerability in searchde.html in foresite CMS allows remote attackers to inject arbitrary web script or HTML via the query parameter...
CVE-2006-3948
Cross-site scripting XSS vulnerability in modules.php in PHP-Nuke INP allows remote attackers to inject arbitrary web script or HTML via the query parameter...
CVE-2006-3948
Cross-site scripting XSS vulnerability in modules.php in PHP-Nuke INP allows remote attackers to inject arbitrary web script or HTML via the query parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in search.html in Alkacon OpenCms 6.0.0, 6.0.2, and 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search action...
CVE-2006-2571
Cross-site scripting XSS vulnerability in search.html in Alkacon OpenCms 6.0.0, 6.0.2, and 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search action...
DEBIAN-CVE-2006-1803
Cross-site scripting XSS vulnerability in sql.php in phpMyAdmin 2.7.0-pl1 allows remote attackers to inject arbitrary web script or HTML via the sqlquery parameter...
CVE-2006-1041
Multiple cross-site scripting XSS vulnerabilities in Gregarius 0.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 rssquery parameter to search.php or 2 tag parameter to tags.php...
CVE-2006-0699
Cross-site scripting XSS vulnerability in search.php in QWikiWiki 1.5, and possibly 1.5.1 and other versions, allows remote attackers to inject arbitrary web script or HTML via the query parameter...
CVE-2006-0521
CVE-2006-0521 is a Cross-site scripting (XSS) vulnerability in BrowserCRM’s results.php where a manipulated query parameter can inject arbitrary script/HTML (demonstrated with an IMG SRC tag). Affects BrowserCRM; CVSS v2 base score 4.3 (MEDIUM). No explicit exploit details or remediation are prov...
CVE-2006-0480
Technical details for CVE-2006-0480 are not publicly available in the provided documents. Monitor for updates.
Sql injection
SQL injection vulnerability in the search module modules/Search/index.php of PHPNuke EV 7.7 -R1 allows remote attackers to execute arbitrary SQL commands via the query parameter, which is used by the search field. NOTE: This is a different vulnerability than CVE-2005-3792...