1247 matches found
CVE-2004-1424
CVE-2004-1424 affects Moodle 1.4.2 and earlier. A cross-site scripting (XSS) flaw exists in view.php where the search parameter can be exploited to inject arbitrary scripts/HTML. This is a remote, unauthenticated vector; impact includes potential partial integrity compromise and user-facing scrip...
Sunshop < 3.4RC2 index.php search Parameter XSS
Binary data 2590.prm...
CVE-2004-1797
Cross-site scripting XSS vulnerability in search.php for FreznoShop 1.3.0 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2004-2656
Multiple cross-site scripting XSS vulnerabilities in Slashdot Like Automated Storytelling Homepage Slash aka Slashcode before R25041 allow remote attackers to inject arbitrary web script or HTML via 1 the topic parameter in search.pl and 2 the filter parameter in submit.pl...
CVE-2003-0492
Cross-site scripting XSS vulnerability in search.asp for Snitz Forums 3.4.03 and earlier allows remote attackers to execute arbitrary web script via the Search parameter...