CVE-2006-5844

Speedywiki 2.0 allows remote attackers to obtain the full path of the web server via the 1 showRevisions and 2 searchText parameters in a index.php, and b a direct request to upload.php without any parameters...

PT-2006-6518 · Speedywiki · Speedywiki

Name of the Vulnerable Software and Affected Versions: Speedywiki version 2.0 Description: The issue allows remote attackers to obtain the full path of the web server. This can be achieved via the showRevisions and searchText parameters in "index.php", and also through a direct request to...

CVE-2006-1407

Multiple cross-site scripting XSS vulnerabilities in Helm Web Hosting Control Panel 3.2.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 txtDomainName parameter to domains.asp or 2 SearchText or 3 UserLevel parameters to default.asp...

CVE-2006-1407: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Helm Web Hosting Control Panel 3.2.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 txtDomainName parameter to domains.asp or 2 SearchText or 3 UserLevel parameters to default.asp...

CVE-2005-3037

CVE-2005-3037 is an XSS vulnerability in Handy Address Book Server 1.1. The issue allows remote attackers to inject arbitrary script or HTML via the SEARCHTEXT parameter in a demos URL, indicating improper input handling in the web interface. The connected documents provide the vulnerability desc...

CVE-2005-3037: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Handy Address Book Server 1.1 allows remote attackers to inject arbitrary web script or HTML via the SEARCHTEXT parameter in a demos URL...

[SA16798] Handy Address Book Server SEARCHTEXT Cross-Site Scripting

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...