EUVD-2008-3327

Malware in sbrugna...

EUVD-2008-2769

Malware in sbrugna...

EUVD-2011-5098

Malware in sbrugna...

Unfixed XSS vulnerability at www.mlowreyengraving.com

Security researcher Atmon3r, has submitted on 12/01/2012 a cross-site-scripting XSS vulnerability affecting www.mlowreyengraving.com, which at the time of submission ranked 16150353 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It...

Sql injection

SQL injection vulnerability in search.php in Neturf eCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the SearchFor parameter. NOTE: some of these details are obtained from third party information...

CVE-2011-5198

CVE-2011-5198 is a confirmed SQL injection in the Neturf eCommerce Shopping Cart, targeting the search.php endpoint. The vulnerability allows remote attackers to append arbitrary SQL via the SearchFor parameter (no authentication required, network access). CVSS v2 metrics indicate a base score of...

CVE-2011-5198

SQL injection vulnerability in search.php in Neturf eCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the SearchFor parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-3340

Cross-site scripting XSS vulnerability in searchresult.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable possibly the opt parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in searchresult.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable possibly the opt parameter...

Sql injection

SQL injection vulnerability in search.asp in DT Centrepiece 4.0 allows remote attackers to execute arbitrary SQL commands via the searchFor parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4477

Cross-site scripting XSS vulnerability in papaya CMS 4.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the babsearchfor parameter...

CVE-2005-3834

Cross-site scripting XSS vulnerability in search.php in Tunez 1.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchFor parameter...

CVE-2004-2059

CVE-2004-2059 : The provided documents describe multiple cross-site scripting vulnerabilities in ASPrunner 2.4 . The flaws allow remote attackers to inject arbitrary web script or HTML via four input vectors: (1) the SearchFor parameter in [TABLE-NAME]_search.asp, (2) the SQL parameter in [TABLE-...

CVE-2005-1403

Multiple cross-site scripting XSS vulnerabilities in JustWilliam's Amazon Webstore 04050100 allow remote attackers to inject arbitrary web script or HTML via the 1 image parameter to closeup.php, the 2 currentIsExpanded or 3 searchFor parameters to index.php, 4 the currentNumber parameter to...