CVE-2008-6654

CVE-2008-6654 is an XSS vulnerability in InfoBiz Server’s search_results.php that allows injecting arbitrary script/HTML via the keywords parameter. Affected: InfoBiz Server (component: search_results.php). Root cause: reflects unvalidated user input into the page, enabling script execution in th...

Sql injection

SQL injection vulnerability in searchresults.php in ABK-Soft AbleDating 2.4 allows remote attackers to execute arbitrary SQL commands via the keyword parameter...

Sql injection

SQL injection vulnerability in searchresults.php in E-Php Scripts E-Shop aka E-Php Shopping Cart Shopping Cart Script allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Unfixed XSS vulnerability at reading.sp2000.org

Security researcher Mystick, has submitted on 28/10/2008 a cross-site-scripting XSS vulnerability affecting reading.sp2000.org, which at the time of submission ranked 4207564 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/06/2009. It is...

CVE-2008-4672

CVE-2008-4672 is a cross-site scripting (XSS) flaw in the buymyscripts Lyrics Script, specifically in search_results.php where an attacker can inject arbitrary script/HTML via the k parameter. The connected documents confirm the vulnerable component and parameter, but do not provide concrete deta...

E-Shop Shopping Cart Script - search_results.php SQL Injection

E-Shop Shopping Cart Script - searchresults.php SQL Injection ephpscripts SQL Injection Bug Founded By Mormoroth This Portal Isnt Free Sp TNX to : imm02rtal-Magicboy-Yashi Lashi-DJ7xpl-R$p And Others www.mormoroth.net www.shabgard.org dork : Powered by ephpscripts Exploit :...

abledating v2.4 (search_results.php) Xss / Sql Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== abledating v2.4 searchresults.php Xss / Sql Injection Vulnerability ====================================================================== By : Ali Jasbi hackerz.ir...

abledating 2.4 >> Sql injection and cross site scripting on search_results.php

By : Ali Jasbi hackerz.ir security & hacking team vendor : abk-soft.com product name : abledating 2.4 Exploits : 1- Sql injection : bug : http://abledating//searchresults.php?pagefrom=18&pageto=18&keyword=sql...

AbleDating 2.4 - 'search_results.php?keyword' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29342/info AbleDating is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include an SQL-injection vulnerability and a cross-site scripting vulnerability. Exploiting these issues...

Cross site scripting

Cross-site scripting XSS vulnerability in searchresults.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: some of these details are obtained from third party information. NOTE: it was later reported that 1.2.3 is...

CVE-2008-2335

Cross-site scripting XSS vulnerability in searchresults.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: some of these details are obtained from third party information. NOTE: it was later reported that 1.2.3 is...

CVE-2008-2335

The CVE-2008-2335 entry describes a cross-site scripting (XSS) vulnerability in Vastal I-Tech phpVID 1.1 and 1.2 (also reported for 1.2.3) where an attacker can inject arbitrary script/HTML via the query parameter in search_results.php. Affected software: phpVID 1.1, 1.2 (and 1.2.3 per notes). Th...

Unfixed XSS vulnerability at www.fratfiles.com

Security researcher Yachi, has submitted on 05/10/2007 a cross-site-scripting XSS vulnerability affecting www.fratfiles.com, which at the time of submission ranked 114307 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/10/2007. It is current...