25 matches found
EUVD-2008-3327
Malware in sbrugna...
EUVD-2011-5098
Malware in sbrugna...
EUVD-2008-2769
Malware in sbrugna...
CVE-2025-10448: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in Campcodes Online Job Finder System 1.0. This affects an unknown function of the file /index.php?q=result&searchfor=bycompany. This manipulation of the argument Search causes sql injection. The attack can be initiated remotely. The exploit has been published and may be use...
CVE-2022-32016: Improper Neutralization of Special Elements used in an SQL Command
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bycompany...
CVE-2022-32014: Improper Neutralization of Special Elements used in an SQL Command
Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=byfunction...
Unfixed XSS vulnerability at www.mlowreyengraving.com
Security researcher Atmon3r, has submitted on 12/01/2012 a cross-site-scripting XSS vulnerability affecting www.mlowreyengraving.com, which at the time of submission ranked 16150353 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It...
Sql injection
SQL injection vulnerability in search.php in Neturf eCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the SearchFor parameter. NOTE: some of these details are obtained from third party information...
CVE-2011-5198
CVE-2011-5198 is a confirmed SQL injection in the Neturf eCommerce Shopping Cart, targeting the search.php endpoint. The vulnerability allows remote attackers to append arbitrary SQL via the SearchFor parameter (no authentication required, network access). CVSS v2 metrics indicate a base score of...
CVE-2011-5198
SQL injection vulnerability in search.php in Neturf eCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the SearchFor parameter. NOTE: some of these details are obtained from third party information...
CVE-2011-5198: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in search.php in Neturf eCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the SearchFor parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-3340
Cross-site scripting XSS vulnerability in searchresult.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable possibly the opt parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in searchresult.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable possibly the opt parameter...
CVE-2008-3340: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in searchresult.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable possibly the opt parameter...
Sql injection
SQL injection vulnerability in search.asp in DT Centrepiece 4.0 allows remote attackers to execute arbitrary SQL commands via the searchFor parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-2776: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.asp in DT Centrepiece 4.0 allows remote attackers to inject arbitrary web script or HTML via the searchFor parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-2775: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in search.asp in DT Centrepiece 4.0 allows remote attackers to execute arbitrary SQL commands via the searchFor parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2005-4477
Cross-site scripting XSS vulnerability in papaya CMS 4.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the babsearchfor parameter...
CVE-2005-4477: Undefined Security Weakness
Cross-site scripting XSS vulnerability in papaya CMS 4.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the babsearchfor parameter...