CVE-2006-3905

SQL injection vulnerability in Webland MyBloggie 2.1.3 allows remote attackers to execute arbitrary SQL commands via the 1 postid parameter in index.php and 2 search function...

CVE-2006-3905: Undefined Security Weakness

SQL injection vulnerability in Webland MyBloggie 2.1.3 allows remote attackers to execute arbitrary SQL commands via the 1 postid parameter in index.php and 2 search function...

D-Link Router UPNP Stack Overflow

D-Link Router UPNP Stack Overflow Release Date: July 13, 2006 Date Reported: February 27, 2006 Patch Development Time In Days: 136 Severity: High Remote Code Execution Vendor: D-Link Routers Affected: DI-524 Rev A DI-524 Rev C DI-524 Rev D DI-604 Rev E DI-624 Rev C DI-624 Rev D DI-784 Rev A...

XSS in GardenWeb

use the searchbox with "scriptalert'XSS'/script eg url: http://search.gardenweb.com/search/nph-ind.cgi?term=223E3Cscript3Ealert2827XSS27293C2Fscript3E...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Clansys aka Clanpage System 1.0 and 1.1 allows remote attackers to inject arbitrary web script or HTML via the func parameter in a search function...

CVE-2006-2367

Cross-site scripting XSS vulnerability in index.php in Clansys aka Clanpage System 1.0 and 1.1 allows remote attackers to inject arbitrary web script or HTML via the func parameter in a search function...

CVE-2006-2367

Cross-site scripting XSS vulnerability in index.php in Clansys aka Clanpage System 1.0 and 1.1 allows remote attackers to inject arbitrary web script or HTML via the func parameter in a search function...

CVE-2006-2367

CVE-2006-2367 is a cross-site scripting (XSS) vulnerability in Clansys (Clanpage System) versions 1.0 and 1.1. The flaw resides in index.php where the search function passes a user-controlled func parameter, enabling remote attackers to inject arbitrary web script or HTML. The published entries c...

tpb-dyn0.txt

ThePirateBay XSS ----------- Desc: XSS In ThePirateBay search function Risk: no risk, just cool, you might be able to steal the admins cookie Discovered by : dyn0 codeslagatgmail.com http://0xdeadface.co.uk TPB blurb : If you dont know that ThePirateBay is then where the fuck have you been for th...

CVE-2005-4315

SQL injection vulnerability in the search function in Plexum PLEXCART X3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly involving the 1 sitemname and 2 sorderby parameters to plexcart.pl...

CMSimple index.php search Function XSS

The remote host is running CMSimple, a CMS written in PHP. The version of CMSimple installed on the remote host is prone to cross-site scripting attacks due to its failure to sanitize user-supplied input to the search field. %NASLMINLEVEL 70300 Josh Zlatin-Amishav josh at ramat dot cc GPLv2 Chang...

CVE-2005-2439

SQL injection vulnerability in UseBB 0.5.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search function...

CVE-2005-2439: Undefined Security Weakness

SQL injection vulnerability in UseBB 0.5.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search function...

CMSimple < 2.5 Beta 3 Search Function XSS

Binary data 3103.prm...

CVE-2004-2084

Cross-site scripting XSS vulnerability in search.php in JShop E-Commerce Server allows remote attackers to inject arbitrary web script or HTML via the xSearch parameter...

CVE-2005-0996

Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via 1 the email or url parameters in the Add function, 2 the min parameter in the viewsdownload function, or 3 the min parameter in the search function...

CVE-2005-0548

Cross-site scripting XSS vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search function...

CVE-2005-0548: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search function...

CVE-2005-0548

Cross-site scripting XSS vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search function...

CVE-2004-1037: Undefined Security Weakness

The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string...