CVE-2007-3484

CVE-2007-3484 describes an XSS vulnerability in Google Custom Search Engine, where the q parameter in the search functionality is susceptible to script injection. The affected component is the search flow of Google Custom Search Engine (claims reference to a non-existent search.php script; Google...

Unfixed XSS vulnerability at www.sucheplus.de

Security researcher Uber0n, has submitted on 06/12/2007 a cross-site-scripting XSS vulnerability affecting www.sucheplus.de, which at the time of submission ranked 1662819 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2007. It is...

Unfixed XSS vulnerability at www.humboldtmfg.com

Security researcher CoNqUeRoR, has submitted on 06/07/2007 a cross-site-scripting XSS vulnerability affecting www.humboldtmfg.com, which at the time of submission ranked 951366 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2007. It is...

CVE-2007-3054

Cross-site scripting XSS vulnerability in search.php in Codelib Linker 2.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the kword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-3054

Cross-site scripting XSS vulnerability in search.php in Codelib Linker 2.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the kword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

MyEvent1.6 (template.php) Remote File Inclusion Vulnerability

.-" "-. / | TiTaNiC | |, .-. .-. ,| | o/ o | |/ / | @ ^^ |IIIIII|/ @8@8|-IIIIII/-| / HaCkEr / @ script:PBSite - PHP Bulletin Site | CMS ==== RFI url:http://sourceforge.net/project/showfiles.php?groupid=88114 authot:titanichacker [email protected] contact: hack-teach.com & mohandko.com...

PBSite - PHP Bulletin Site | CMS ====> RFI

.-" "-. / | TiTaNiC | |, .-. .-. ,| | o/ o | |/ / | @ ^^ |IIIIII|/ @8@8|-IIIIII/-| / HaCkEr / @ script:PBSite - PHP Bulletin Site | CMS ==== RFI url:http://sourceforge.net/project/showfiles.php?groupid=88114 authot:titanichacker [email protected] contact: hack-teach.com & mohandko.com...

CVE-2007-2962

CVE-2007-2962 affects Particle Gallery 1.0.1 and earlier, with a cross-site scripting vulnerability in search.php via the order parameter. The underlying issue is a reflected XSS allowing remote attackers to inject arbitrary script/HTML into victims’ browsers. Exploitation details are not provide...

Sql injection

SQL injection vulnerability in search.php in Pre Classifieds Listings 1.0 allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2007-2675

CVE-2007-2675 concerns a SQL injection in the file search.php of Pre Classifieds Listings 1.0 , where an attacker can supply the category parameter to execute arbitrary SQL. The vulnerability is exploitable remotely with network access and low authentication requirements, potentially impacting co...

Sql injection

Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 part and 2 by parameters to a search.php, or the 2 id parameter to b viewforum.php...

Design/Logic Flaw

SonicBB 1.0 allows remote attackers to obtain sensitive information via the 1 by parameter to search.php, 2 p parameter to viewforum.php, and the 3 id parameter to a viewforum.php or b members.php, which reveal the installation path in the resulting error message...

CVE-2007-1903

SonicBB 1.0 is affected by CVE-2007-1903: a cross-site scripting (XSS) vulnerability in search.php via the part parameter. The issue allows remote attackers to inject arbitrary script/HTML; exploitation details indicate it can be triggered when PHP magic_quotes_gpc is Off. The advisory references...

Unfixed XSS vulnerability at www.invvio.com

Security researcher Uber0n, has submitted on 05/12/2007 a cross-site-scripting XSS vulnerability affecting www.invvio.com, which at the time of submission ranked 1344710 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2007. It is currentl...

CVE-2007-2599

Multiple SQL injection vulnerabilities in TutorialCMS aka Photoshop Tutorials 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 catFile parameter to a browseCat.php or b browseSubCat.php; the 2 id parameter to c openTutorial.php, d topFrame.php, or e...

CVE-2007-2600

Multiple cross-site scripting XSS vulnerabilities in TutorialCMS aka Photoshop Tutorials 1.00 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 catFile parameter to a browseCat.php or b browseSubCat.php; the 2 id parameter to c openTutorial.php, d topFrame.php, o...

CVE-2007-2599

TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier contains multiple SQL injection vulnerabilities. The affected components include (1) catFile parameter for browseCat.php and browseSubCat.php, (2) id parameter for openTutorial.php, topFrame.php, and admin/editListing.php, and (3) the search ...

Unfixed XSS vulnerability at www.searchtons.com

Security researcher RoMeO, has submitted on 05/11/2007 a cross-site-scripting XSS vulnerability affecting www.searchtons.com, which at the time of submission ranked 145218 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/11/2007. It is...

Unfixed XSS vulnerability at www.t7r.org

Security researcher St@rExT, has submitted on 25/04/2007 a cross-site-scripting XSS vulnerability affecting www.t7r.org, which at the time of submission ranked 1467659 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/04/2007. It is currently...

Directory traversal

Multiple directory traversal vulnerabilities in iXon CMS 0.30 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the themeurl parameter to 1 index.php, 2 page.php, 3 search.php, 4 single.php, and 5 archives.php...