Cross site scripting

Cross-site scripting XSS vulnerability in Mozilla Firefox 4.x through 4.0.1 allows remote attackers to inject arbitrary web script or HTML via an SVG element containing an HTML-encoded entity...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Rational Team Concert RTC 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165513...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web UI in IBM Rational Team Concert RTC 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511...

CVE-2011-2606

Cross-site scripting XSS vulnerability in the Web UI in IBM Rational Team Concert RTC 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511...

PT-2011-3956

Name of the Vulnerable Software and Affected Versions IBM Rational Team Concert version 3.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. This could potentially lead to unauthorized actions on the affected...

PT-2011-3063

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 2.0.0 through 2.1.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions 2.0.0 through 2.1.3, update to a versi...

CVE-2011-2369

Cross-site scripting XSS vulnerability in Mozilla Firefox 4.x through 4.0.1 allows remote attackers to inject arbitrary web script or HTML via an SVG element containing an HTML-encoded entity...

CVE-2011-1330

Cross-site scripting XSS vulnerability in WeblyGo 5.0 Pro/LE, 5.02 Pro/LE, 5.03 Pro/LE, 5.04 Pro/LE, and 5.10 Pro/LE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in WeblyGo 5.0 Pro/LE, 5.02 Pro/LE, 5.03 Pro/LE, 5.04 Pro/LE, and 5.10 Pro/LE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2011-3061

Name of the Vulnerable Software and Affected Versions WeblyGo versions 5.0 Pro/LE through 5.10 Pro/LE Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions 5.0 Pro/LE through 5.10 Pro/LE, a...

CVE-2011-1264

Cross-site scripting XSS vulnerability in Active Directory Certificate Services Web Enrollment in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "Active Directory...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in config.c in config.cgi in 1 Nagios 3.2.3 and 2 Icinga before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the expand parameter, as demonstrated by an a command action or a b hosts action...

Cross site scripting

Cross-site scripting XSS vulnerability in Coppermine Photo Gallery CPG before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-4667...

PT-2011-3899

Name of the Vulnerable Software and Affected Versions Coppermine Photo Gallery versions prior to 1.5.12 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 1.5.12, update to...

PT-2011-3900

Name of the Vulnerable Software and Affected Versions Icinga versions prior to 1.4.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via a JavaScript expression. This can be achieved by exploiting the onload attribute of a BODY element, for instance, when it i...

PT-2011-1622

Name of the Vulnerable Software and Affected Versions Coppermine Photo Gallery versions prior to 1.4.27 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 1.4.27, update to version 1.4.27 or later to...

Mandriva Linux Security Advisory : webmin (MDVSA-2011:109)

A vulnerability was discovered and corrected in webmin : Cross-site scripting XSS vulnerability in Webmin 1.540 and earlier allows local users to inject arbitrary web script or HTML via a chfn command that changes the real aka Full Name field, related to useradmin/index.cgi and...

CVE-2011-1953

Multiple cross-site scripting XSS vulnerabilities in common.php in Post Revolution before 0.8.0c-2 allow remote attackers to inject arbitrary web script or HTML via an attribute of a 1 P, a 2 STRONG, a 3 A, a 4 EM, a 5 I, a 6 IMG, a 7 LI, an 8 OL, a 9 VIDEO, or a 10 BLOCKQUOTE element...

Cross site scripting

Cross-site scripting XSS vulnerability in the safehtml filter in Products.PortalTransforms in Plone 2.1 through 4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-2422...

CVE-2011-1765

Cross-site scripting XSS vulnerability in MediaWiki before 1.16.5, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .shtml at the end of the query string, in conjunction wit...