1255 matches found
CVE-2006-1532
Cross-site scripting XSS vulnerability in search.php in PHP Classifieds 6.18, 6.20, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchword parameter...
CVE-2006-1532
Cross-site scripting XSS vulnerability in search.php in PHP Classifieds 6.18, 6.20, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchword parameter...
CVE-2006-1401
Multiple cross-site scripting XSS vulnerabilities in search.php in Calendar Express 2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 allwords or 2 oneword parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party informati...
CVE-2006-1399
Cross-site scripting XSS vulnerability in searchresult.php in Meeting Reserve 1.0 beta allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
CVE-2006-1405
Cross-site scripting XSS vulnerability in search.aspx in SweetSuite.NET Content Management System ssCMS 2.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...
Sql injection
SQL injection vulnerability in search.asp in Hosting Controller 6.1 Hotfix 2.9 allows remote attackers to execute arbitrary SQL commands via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-1229
SQL injection vulnerability in search.asp in Hosting Controller 6.1 Hotfix 2.9 allows remote attackers to execute arbitrary SQL commands via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-1135
Multiple cross-site scripting XSS vulnerabilities in sBlog 0.7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 keyword parameter to search.php or 2 username parameter to commentsdo.php...
CVE-2006-1135
Multiple cross-site scripting XSS vulnerabilities in sBlog 0.7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 keyword parameter to search.php or 2 username parameter to commentsdo.php...
CVE-2006-0509
Multiple cross-site scripting XSS vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or HTML via 1 the contactsearch parameter and 2 unspecified url fields...
CVE-2006-0466
Cross-site scripting XSS vulnerability in search.asp in Goldstag Content Management System allows remote attackers to inject arbitrary web script or HTML via the text parameter...
Sql injection
Multiple SQL injection vulnerabilities in PowerPortal, possibly 1.1 beta through 1.3, allow remote attackers to execute arbitrary SQL commands via the search parameter in 1 index.php and 2 search.php. NOTE: This issue might overlap CVE-2004-0663.2...
Sql injection
Multiple SQL injection vulnerabilities in SaralBlog 1.0 allow remote attackers to execute arbitrary SQL commands via the search parameter to search.php. NOTE: the id/viewprofile.php issue is already covered by CVE-2005-4058...
CVE-2006-0345
The CVE-2006-0345 entry describes multiple SQL injection vulnerabilities in SaralBlog 1.0. The issues allow remote attackers to execute arbitrary SQL commands via the search parameter to search.php. The reference also notes that the id/viewprofile.php issue is covered by CVE-2005-4058. The connec...
Cross site scripting
Cross-site scripting XSS vulnerability in searchform.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2006-0175
Cross-site scripting XSS vulnerability in searchform.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2006-0175
Cross-site scripting XSS vulnerability in searchform.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
PT-2005-5443 · Fidra · Fidra Lighthouse Cms
Name of the Vulnerable Software and Affected Versions: Fidra Lighthouse CMS versions 1.1.0 and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the search parameter in a query string to the home page. The vendor disputes this...