CVE-2006-0334

CVE-2006-0334 describes a reflected cross-site scripting (XSS) vulnerability in the search.php of My Amazon Store Manager 1.0. The issue enables an attacker to inject arbitrary web script or HTML by supplying crafted input via the Keywords parameter (note: some sources reference parameter q, but ...

CVE-2006-0345: Undefined Security Weakness

Multiple SQL injection vulnerabilities in SaralBlog 1.0 allow remote attackers to execute arbitrary SQL commands via the search parameter to search.php. NOTE: the id/viewprofile.php issue is already covered by CVE-2005-4058...

CVE-2006-0334: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.php in My Amazon Store Manager 1.0 allows remote attackers to inject arbitrary web script or HTML via the Keywords parameter. NOTE: some sources claim that the affected parameter is "q", but the only public archive of the original researcher...

CVE-2006-0220: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in DCP-Portal 5.3 through 6.1.1 allow remote attackers to inject arbitrary web script or HTML via 1 the day parameter in calendar.php and 2 the input form in search.php. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2005-4642: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in HydroBB 1.0.0 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to 1 search.php, 2 members.php, 3 stats.php, 4 viewforum.php, 5 register.php, 6 usercp.php, 7 groups.php, 8 pms.php, and 9 calendar.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 p and 2 keyword parameters in a index.php and b search.php...

CVE-2006-0101

Multiple cross-site scripting XSS vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 p and 2 keyword parameters in a index.php and b search.php...

CVE-2006-0101

Multiple cross-site scripting XSS vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 p and 2 keyword parameters in a index.php and b search.php...

CVE-2006-0101: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 p and 2 keyword parameters in a index.php and b search.php...

CVE-2005-4611: Undefined Security Weakness

SQL injection vulnerability in search.php in Free ClickBank 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the keywords parameter...

CVE-2006-0068

SQL injection vulnerability in Primo Cart 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 q parameter to search.php and 2 email parameter to user.php...

Sql injection

SQL injection vulnerability in Primo Cart 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 q parameter to search.php and 2 email parameter to user.php...

CVE-2006-0068

SQL injection vulnerability in Primo Cart 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 q parameter to search.php and 2 email parameter to user.php...

CVE-2006-0068: Undefined Security Weakness

SQL injection vulnerability in Primo Cart 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 q parameter to search.php and 2 email parameter to user.php...

CVE-2005-4642

Multiple cross-site scripting XSS vulnerabilities in HydroBB 1.0.0 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to 1 search.php, 2 members.php, 3 stats.php, 4 viewforum.php, 5 register.php, 6 usercp.php, 7 groups.php, 8 pms.php, and 9 calendar.php...

CVE-2005-4546

search.php in eggblog 2.0 allows remote attackers to obtain the full path via an invalid q parameter, as used by the Keyword and Search fields, possibly due to an SQL injection vulnerability...

CVE-2005-4546

CVE-2005-4546 affects eggblog 2.0: the search.php module exposes the server full path to remote attackers via an invalid q parameter, with the description suggesting a possible SQL injection trigger. The concrete impact stated is path disclosure; no additional exploit details are provided in the ...

CVE-2005-4547

The vulnerability is a Cross-site Scripting (XSS) issue in eggblog 2.0, specifically in home/search.php, where the q parameter used by Keyword and Search fields can allow remote attackers to execute arbitrary SQL commands. The description notes XSS as the vulnerability type but the impact is stat...

CVE-2005-4547: Undefined Security Weakness

Cross-site scripting XSS vulnerability in home/search.php in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the q parameter, as used by the Keyword and Search fields...

CVE-2005-4546: Undefined Security Weakness

search.php in eggblog 2.0 allows remote attackers to obtain the full path via an invalid q parameter, as used by the Keyword and Search fields, possibly due to an SQL injection vulnerability...