CVE-2007-1551

Multiple cross-site scripting XSS vulnerabilities in phpx 3.5.15 allow remote attackers to inject arbitrary web script or HTML via 1 the signature in "dans profile," or 2 search.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in phpx 3.5.15 allow remote attackers to inject arbitrary web script or HTML via 1 the signature in "dans profile," or 2 search.php...

CVE-2007-1551

Multiple cross-site scripting XSS vulnerabilities in phpx 3.5.15 allow remote attackers to inject arbitrary web script or HTML via 1 the signature in "dans profile," or 2 search.php...

CVE-2007-1428

SQL injection vulnerability in search.php in PHP Labs JobSitePro 1.0 allows remote attackers to execute arbitrary SQL commands via the salary parameter...

Sql injection

SQL injection vulnerability in search.php in PHP Labs JobSitePro 1.0 allows remote attackers to execute arbitrary SQL commands via the salary parameter...

JobSitePro 1.0 (search.php) Remote SQL Injection Exploit

No description provided by source. //Coded by ajann //'=============================================================================================== //'Script Name: JobSitePro 1.0 search.php Remote BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajann //'Contact : : //'S.Page :...

JobSitePro 1.0 - search.php SQL Injection

JobSitePro 1.0 - search.php SQL Injection //Coded by ajann //'=============================================================================================== //'Script Name: JobSitePro 1.0 search.php Remote BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajann //'Contact : : //'S.Page...

JobSitePro 1.0 - 'search.php' SQL Injection

//Coded by ajann //'=============================================================================================== //'Script Name: JobSitePro 1.0 search.php Remote BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajann //'Contact : : //'S.Page : http://phplabs.com/ //'$$ : 39.95 $...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Phpwebgallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 login or 2 mailaddress field in Register.php, or the 3 searchauthor, 4 mode, 5 startyear, 6 endyear, or 7 datetype field in Search.php, a different...

CVE-2006-7057

Technical details (affected versions, root cause nuances, and remediation) are not provided in the supplied connected documents. Monitor for updates from official advisories.

Unfixed XSS vulnerability at www.bilinmeyen.com

Security researcher amele2, has submitted on 15/02/2007 a cross-site-scripting XSS vulnerability affecting www.bilinmeyen.com, which at the time of submission ranked 320097 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/02/2007. It is...

Calendar Express - search.php Cross-Site Scripting

Calendar Express - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/22578/info Calendar Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrar...

ipb search.php vulnerability analysis and thinking-vulnerability warning-the black bar safety net

ipb search.php vulnerability analysis and thinking A vulnerability model may unearth a batch of vulnerabilities Idea is the most important pregreplace+/e Author: SuperHeiAtph4nt0m.org Blog: http://superhei.blogbus.com/ Team: http://www.ph4nt0m.org Data: 2006-04-27 Simple analysis The vulnerabilit...

Sql injection

SQL injection vulnerability in i-search.php in Michelle's L2J Dropcalc 4 and earlier allows remote authenticated users to execute arbitrary SQL commands via the itemid parameter...

CVE-2007-0687

CVE-2007-0687 describes an SQL injection in i-search.php of Michelle's L2J Dropcalc 4 and earlier. The vulnerability allows remote authenticated users to inject arbitrary SQL via the itemid parameter, potentially impacting data confidentiality and integrity. Affected software: Michelle's L2J Drop...

CVE-2007-0550

The CVE-2007-0550 entry concerns a Cross-Site Scripting (XSS) vulnerability in the search.php component of 212cafeBoard 0.08 Beta. The flaw allows remote attackers to inject arbitrary web script or HTML via the keyword parameter, as documented by the NVD entry with CVSS 2.0 base score 6.8 (Medium...

indexu-xss.txt

vulnerability script indexu all versions Found by :SwEET-DeViL & viP HaCkEr & HaCkEr sUn TeaM AL-GaRNi Application : indexu version : all versions URL : http://www.nicecoder.com/ google : "Powered by INDEXU 5." Exploits : |//1\| in upgrade.php...

CVE-2007-0388

SQL injection vulnerability in search.php in Woltlab Burning Board wBB 1.0.2 and earlier, and 2.3.6 and earlier in the 2.x series, allows remote attackers to execute arbitrary SQL commands via the boardids1 and other boardids parameters...

CVE-2007-0388

CVE-2007-0388 affects Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.x up to 2.3.6. The vulnerability is a SQL injection in the search.php handling of boardids[1] and other boardids[] parameters due to unsafe input handling, allowing remote attackers to execute arbitrary SQL commands. Publi...

Woltlab Burning Board Search.PHP SQL注入漏洞

Woltlab Burning Board是一款基于PHP的WEB应用程序。 Woltlab Burning Board不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Search.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得敏感信息。 Woltlab Woltlab Burning Board Lite 1.0.2 WoltLab Burning Board Lite 1.0.2 WoltLab Burning Board Lite 1.0.1 e WoltLab Burning Board Lite...