CVE-2008-2127

Cross-site scripting XSS vulnerability in search.php in CMS Faethon 2.2 Ultimate allows remote attackers to inject arbitrary web script or HTML via the what parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-2127

Cross-site scripting XSS vulnerability in search.php in CMS Faethon 2.2 Ultimate allows remote attackers to inject arbitrary web script or HTML via the what parameter. NOTE: some of these details are obtained from third party information...

Sphider 1.3.4 - 'query' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29074/info Sphider is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Unfixed XSS vulnerability at planetlotus.org

Security researcher .virex, has submitted on 05/04/2008 a cross-site-scripting XSS vulnerability affecting planetlotus.org, which at the time of submission ranked 795466 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/04/2008. It is currentl...

Unfixed XSS vulnerability at www.gopetition.com

Security researcher Azat Harutyunyan, has submitted on 30/04/2008 a cross-site-scripting XSS vulnerability affecting www.gopetition.com, which at the time of submission ranked 25543 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2008. It...

CVE-2008-1987

CVE-2008-1987 affects EncapsGallery 2.0.2, via the search.php vulnerability where an attacker can inject arbitrary HTML/script through the search parameter (XSS). The provided sources confirm the vulnerable component and parameter vector but do not include explicit exploit details, impacted versi...

Unfixed XSS vulnerability at www.thepoles.com

Security researcher cueballr, has submitted on 19/04/2008 a cross-site-scripting XSS vulnerability affecting www.thepoles.com, which at the time of submission ranked 730060 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/04/2008. It is...

Unfixed XSS vulnerability at www.worldemart.com

Security researcher cueballr, has submitted on 19/04/2008 a cross-site-scripting XSS vulnerability affecting www.worldemart.com, which at the time of submission ranked 360560 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/04/2008. It is...

Unfixed XSS vulnerability at www.liveanalsex.com

Security researcher Mystick, has submitted on 04/11/2008 a cross-site-scripting XSS vulnerability affecting www.liveanalsex.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2009. It is currentl...

Unfixed XSS vulnerability at www.mymusicjob.com

Security researcher SaMTHG, has submitted on 04/07/2008 a cross-site-scripting XSS vulnerability affecting www.mymusicjob.com, which at the time of submission ranked 709062 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2008. It is...

CVE-2008-1621

Multiple cross-site scripting XSS vulnerabilities in GeeCarts allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 show.php, 2 search.php, and 3 view.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Unfixed XSS vulnerability at www.urscorp.com

Security researcher Kaospunk, has submitted on 29/03/2008 a cross-site-scripting XSS vulnerability affecting www.urscorp.com, which at the time of submission ranked 223983 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008. It is...

CVE-2008-1352

Directory traversal vulnerability in search.php in EdiorCMS ecms 3.0 allows remote attackers to read arbitrary files via a .. dot dot in the SearchTemplate parameter during a Title search...

CVE-2008-1352

Directory traversal vulnerability in search.php in EdiorCMS ecms 3.0 allows remote attackers to read arbitrary files via a .. dot dot in the SearchTemplate parameter during a Title search...

SNewsCMS 2.x - search.php Cross-Site Scripting

SNewsCMS 2.x - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/28262/info SNewsCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this...

snewscmsrus-xss.txt

New Advisory: Snewscms Rus v2 http://www.medprostuda.ru --------------------Summary---------------- Software: SnewsCMS Rus v. 2.3 Sowtware's Web Site: http://www.snewscms.net.ru Versions: 2.4 Critical Level: Moderate Type: XSS Class: Remote Status: Unpatched PoC/Exploit: Not Available Solution: N...

new vuln in snewscms rus v 2.3

New Advisory: Snewscms Rus v2 http://www.medprostuda.ru --------------------Summary---------------- Software: SnewsCMS Rus v. 2.3 Sowtware's Web Site: http://www.snewscms.net.ru Versions: 2.4 Critical Level: Moderate Type: XSS Class: Remote Status: Unpatched PoC/Exploit: Not Available Solution: N...

CVE-2008-1326

Gallarific is affected by a Cross-site Scripting (XSS) vulnerability in search.php, exploitable via the query parameter to inject arbitrary web script/HTML. This is the explicit vulnerability described across multiple sources (including OpenVAS and NVD entries). The connected documents do not pro...

CVE-2008-1326

Cross-site scripting XSS vulnerability in search.php in Gallarific allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-1076

CVE-2008-1076 describes a Cross-site Scripting (XSS) vulnerability in Interspire Shopping Cart 1.x, where an attacker can inject arbitrary script via the search_query parameter in search.php. The root cause is improper handling/sanitization of the search_query input, enabling script execution in ...