CVE-2011-1102

Cross-site scripting XSS vulnerability in the WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows remote attackers to inject arbitrary web script or HTML...

PT-2011-2867

Name of the Vulnerable Software and Affected Versions F-Secure Policy Manager versions 7.x through 9.00 before hotfix 4 on Windows and hotfix 2 on Linux F-Secure Policy Manager version 8.00 before hotfix 2 F-Secure Policy Manager version 8.1x before hotfix 3 on Windows and hotfix 2 on Linux...

CVE-2011-1062

Multiple cross-site scripting XSS vulnerabilities in include/html/header.php in TaskFreak! 0.6.4 allow remote attackers to inject arbitrary web script or HTML via the 1 sContext, 2 sort, 3 dir, and 4 show parameters in a save action to index.php; the 5 dir and 6 show parameters to printlist.php;...

CVE-2011-1063

Multiple cross-site scripting XSS vulnerabilities in Cherry-Design Photopad 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 datatitle parameters in an edit action to files.php, or 3 id parameter in a view action to gallery.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cherry-Design Photopad 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 datatitle parameters in an edit action to files.php, or 3 id parameter in a view action to gallery.php...

CVE-2011-1066

Cross-site scripting XSS vulnerability in the Messaging module 6.x-2.x before 6.x-2.4 and 6.x-4.x before 6.x-4.0-beta8 for Drupal allows remote attackers with administer messaging permissions to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 full name or 2 username field in a confirmation message...

moinmoin -- cross-site scripting via RST parser

MITRE CVE team reports: Cross-site scripting XSS vulnerability in the reStructuredText rst parser in parser/textrst.py in MoinMoin before 1.9.4, when docutils is installed or when "format rst" is set, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the refu...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in EmployeeSearch.cc in the Employee Search Engine in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allow remote attackers to inject arbitrary web script or HTML via the searchString parameter in a 1 showList or 2 Search action...

CVE-2010-3274

Multiple cross-site scripting XSS vulnerabilities in EmployeeSearch.cc in the Employee Search Engine in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allow remote attackers to inject arbitrary web script or HTML via the searchString parameter in a 1 showList or 2 Search action...

CVE-2011-1034

Cross-site scripting XSS vulnerability in the UI in IBM Rational Build Forge 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the mod parameter to the fullcontrol program. NOTE: some of these details are obtained from third party information...

CVE-2011-1029

Cross-site scripting XSS vulnerability in IBM Rational Team Concert RTC 2.0.0.x allows remote authenticated users to inject arbitrary web script or HTML via the name of a shared report...

CVE-2011-0697

Cross-site scripting XSS vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload...

Cross site scripting

Cross-site scripting XSS vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-0587...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the administrator console in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary web script or HTML via the cfform tag...

PT-2011-2467

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 8.0 through 9.0.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the administrator console. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via...

PT-2011-2470

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 8.0 through 9.0.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the cfform tag. This could potentially lead to unauthorized actions on behalf of the...

Cross site scripting

Cross-site scripting XSS vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: it is possible that this overlaps CVE-2011-0535...

Cross site scripting

Cross-site scripting XSS vulnerability in Vanilla Forums before 2.0.17.6 allows remote attackers to inject arbitrary web script or HTML via the p parameter to an unspecified component, a different vulnerability than CVE-2011-0526...