1316 matches found
CVE-2007-5625
Cross-site scripting XSS vulnerability in filename.asp in ASP Site Search SearchSimon Lite 1.0 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter...
CVE-2007-5625: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in filename.asp in ASP Site Search SearchSimon Lite 1.0 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter...
Unfixed XSS vulnerability at www.e-center.gr
Security researcher St@R-gaZ3r, has submitted on 10/11/2007 a cross-site-scripting XSS vulnerability affecting www.e-center.gr, which at the time of submission ranked 5812734 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/11/2007. It is...
CVE-2007-4434
Cross-site scripting XSS vulnerability in textfilesearch.asp in the Text File Search ASP Classic edition allows remote attackers to inject arbitrary web script or HTML via the query parameter...
CVE-2007-4434: Undefined Security Weakness
Cross-site scripting XSS vulnerability in textfilesearch.asp in the Text File Search ASP Classic edition allows remote attackers to inject arbitrary web script or HTML via the query parameter...
CVE-2007-4386: Undefined Security Weakness
SQL injection vulnerability in search.php in GetMyOwnArcade allows remote attackers to execute arbitrary SQL commands via the query parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Yandex.Server allow remote attackers to inject arbitrary web script or HTML via the 1 query or 2 within parameter to the default URI...
CVE-2007-3485
Multiple cross-site scripting XSS vulnerabilities in Yandex.Server allow remote attackers to inject arbitrary web script or HTML via the 1 query or 2 within parameter to the default URI...
CVE-2007-3485: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Yandex.Server allow remote attackers to inject arbitrary web script or HTML via the 1 query or 2 within parameter to the default URI...
CVE-2007-2913
Cross-site scripting XSS vulnerability in index.php in ClonusWiki .5 allows remote attackers to inject arbitrary web script or HTML via the query parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in ClonusWiki .5 allows remote attackers to inject arbitrary web script or HTML via the query parameter...
CVE-2007-2913
Cross-site scripting XSS vulnerability in index.php in ClonusWiki .5 allows remote attackers to inject arbitrary web script or HTML via the query parameter...
CVE-2007-2913: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in ClonusWiki .5 allows remote attackers to inject arbitrary web script or HTML via the query parameter...
CVE-2007-1515
Multiple cross-site scripting XSS vulnerabilities in Horde IMP H3 4.1.3, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via 1 the email Subject header in thread.php, 2 the editquery parameter in search.php, or other unspecified parameters in search.php. NOTE:...
CVE-2006-6096: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in activenewssearch.asp in ActiveNews Manager allows remote attackers to inject arbitrary web script or HTML via the query parameter...
CVE-2006-5643
Cross-site scripting XSS vulnerability in searchde.html in foresite CMS allows remote attackers to inject arbitrary web script or HTML via the query parameter...
CVE-2006-5643: Undefined Security Weakness
Cross-site scripting XSS vulnerability in searchde.html in foresite CMS allows remote attackers to inject arbitrary web script or HTML via the query parameter...
CVE-2006-5529: Undefined Security Weakness
Cross-site scripting XSS vulnerability in smumdadotcomascybalumni/mod.php in SchoolAlumni Portal 2.26 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search operation in the katalog module. NOTE: some of these details are obtained from third party...
CVE-2006-5184: Undefined Security Weakness
SQL injection vulnerability in PKR Internet Taskjitsu before 2.0.6 allows remote attackers to execute arbitrary SQL commands via the key parameter, when the limit query parameter is set to customerid...