CVE-2005-4026: Undefined Security Weakness

search.php in Geeklog 1.4.x before 1.4.0rc1, and 1.3.x before 1.3.11sr3, allows remote attackers to obtain sensitive information via invalid 1 datestart and 2 dateend parameters, which leaks the web server path in an error message...

CVE-2005-4010: Undefined Security Weakness

SQL injection vulnerability in KBase Express 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 id parameter to category.php and 2 search parameters to search.php...

CVE-2005-3908: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in GhostScripter Amazon Shop 5.0.0, and other versions before 5.0.2, allows remote attackers to inject web script or HTML via the query parameter...

CVE-2005-3881

SQL injection vulnerability in search.php in AtlantisFAQ Knowledge Base Software 2.03 and earlier allows remote attackers to execute arbitrary SQL commands via the searchStr parameter...

KBase Express SQL inj. vuln.

KBase Express SQL inj. vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/kbase-express-sql-inj-vuln.html Vendor:http://www.sensationdesigns.com/products/scripts/kbaseexpress/ affected version: 1.0.0 and prior Product Description: KBase Express ...

CVE-2005-3881: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in search.php in AtlantisFAQ Knowledge Base Software 2.03 and earlier allows remote attackers to execute arbitrary SQL commands via the searchStr parameter...

CVE-2005-3838

The CVE-2005-3838 issue affects IsolSoft Support Center 2.2 and earlier. Multiple SQL injection vulnerabilities exist in search.php, exploitable via the parameters (1) lorder, (2) Priority, (3) Status, (4) Category, (5) searchvalue, and (6) field to execute arbitrary SQL commands remotely. The pr...

CVE-2005-3834

Cross-site scripting XSS vulnerability in search.php in Tunez 1.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchFor parameter...

CVE-2005-3834

CVE-2005-3834 : An XSS vulnerability exists in Tunez (versions 1.21 and earlier) in search.php, exploitable via the searchFor parameter. Remote attackers can inject arbitrary web script or HTML. Affected software/component: Tunez 1.21 and earlier; vulnerable parameter: searchFor in search.php. Im...

CVE-2005-3814

CVE-2005-3814 affects SmartPPC Pro with multiple XSS flaws accessible through the username parameter in directory.php, frames.php, and search.php. The PT-2005-4562 entry confirms the vulnerabilities, noting no specific affected versions and indicating that a fix/version with patches is not listed...

CVE-2005-3834: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.php in Tunez 1.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchFor parameter...

CVE-2005-3838: Undefined Security Weakness

Multiple SQL injection vulnerabilities in search.php in IsolSoft Support Center 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 lorder, 2 Priority, 3 Status, 4 Category, 5 searchvalue, and 6 field parameter...

CVE-2005-3814: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in SmartPPC Pro allow remote attackers to inject arbitrary web script or HTML via the username parameter in 1 directory.php, 2 frames.php, and 3 search.php...

Amazon Shop 5.0.0 XSS vuln.

Amazon Shop 5.0.0 XSS vuln. Vuln. dicovered by : r0t Date: 26 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/amazon-shop-500-xss-vuln.html Vendor:http://www.ghostscripter.com/amazonshop.php affected version:5.0.0 and prior Product description: With Amazon Shop you can run your ver...

IsolSoft Support Center SQL inj.

IsolSoft Support Center SQL inj. Vuln. dicovered by : r0t Date: 24 nov. 2005 Orginal advsiory:http://pridels.blogspot.com/2005/11/isolsoft-support-center-sql-inj.html Vendor:http://www.isolsoft.com/ affected version:Support Center v2.2 and prior Vuln. Desciption: Input passed to the "field"...

Top Auction Multiple SQL Vuln.

Top Auction Multiple SQL Vuln. Vuln. dicovered by : r0t Date 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/top-auction-multiple-sql-vuln.html Vendor:http://www.phplabs.com/ Product link:http://www.phplabs.com/scripts.php?script=Top20Auction affected version: Top Auction last...

CVE-2003-1240: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in CuteNews 0.88 allows remote attackers to execute arbitrary PHP code via a URL in the cutepath parameter in 1 shownews.php, 2 search.php, or 3 comments.php...

CVE-2005-3543: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in search.php in Phorum 5.0.0alpha through 5.0.20, when registerglobals is enabled, allows remote attackers to execute arbitrary SQL commands via the forumids parameter...

[waraxe-2005-SA#043] - Sql injection in Phorum 5.0.20 and earlier

================================================================================ waraxe-2005-SA043 ================================================================================ Sql injection in Phorum 5.0.20 and earlier...

CVE-2005-3518: Undefined Security Weakness

SQL injection vulnerability in search.php in PunBB 1.2.7 and 1.2.8 allows remote attackers to execute arbitrary SQL commands via the oldsearches parameter...