CVE-2007-5190

Multiple cross-site scripting XSS vulnerabilities in Alcatel OmniVista 4760 R4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the action parameter to php-bin/Webclient.php or 2 the Langue parameter to the default URI...

Cross site scripting

Cross-site scripting XSS vulnerability in Weblinks for Drupal 4.7.x before 4.7.x-1.0 and 5.x before 5.x-1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2003-1384

Cross-site scripting XSS vulnerability in index.php in PY-Livredor 1.0 allows remote attackers to insert arbitrary web script or HTML via the 1 titre, 2 Votre pseudo, 3 Votre e-mail, or 4 Votre message fields...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.0.13 aka Sunglow allow remote attackers to inject arbitrary web script or HTML via the 1 Title or 2 Section Name form fields in the Section Manager component, or 3 multiple unspecified fields in New Menu Item...

CVE-2002-2273

Cross-site scripting XSS vulnerability in Webster HTTP Server allows remote attackers to inject arbitrary web script or HTML via the URL...

CVE-2002-2278

Cross-site scripting XSS vulnerability in modsearch/index.php in PortailPHP 0.99 allows remote attackers to inject arbitrary web script or HTML via the 1 $AppTheme, 2 $RubSearch, 3 $RubNews, 4 $RubFile, 5 $RubLiens, or 6 $RubFaq variables...

CVE-2002-2296

Cross-site scripting XSS vulnerability in YaBB.pl in Yet Another Bulletin Board YaBB 1 Gold SP 1 allows remote attackers to inject arbitrary web script or HTML via the num parameter...

CVE-2007-5547: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco IOS allows remote attackers to inject arbitrary web script or HTML, and execute IOS commands, via unspecified vectors, aka PSIRT-2022590358. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However,...

Cross site scripting

Cross-site scripting XSS vulnerability in projects in Nabh Stringbeans Portal sbportal 3.2 allows remote attackers to inject arbitrary web script or HTML via the projectname parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in CMS Made Simple 1.1.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 the anchor tag and 2 listtags...

CVE-2007-5455

Cross-site scripting XSS vulnerability in wxis.exe in WWWISIS 7.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a call to the iah/iah.xis IsisScript code, possibly involving the lang or exprSearch parameter...

CVE-2007-5455

Cross-site scripting XSS vulnerability in wxis.exe in WWWISIS 7.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a call to the iah/iah.xis IsisScript code, possibly involving the lang or exprSearch parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the comsearch component in Joomla! 1.0.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchword parameter. NOTE: this might be related to CVE-2007-4189.1...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ActiveKB NX 2.5.4 allow remote attackers to inject arbitrary web script or HTML via the page parameter to the default URI for some directories, as demonstrated by 1 ActiveKB/ and 2 default/categories/ActiveKB/...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Nucleus 3.01 allows remote attackers to inject arbitrary web script or HTML via the archive parameter...

CVE-2007-5426

Multiple cross-site scripting XSS vulnerabilities in ActiveKB NX 2.5.4 allow remote attackers to inject arbitrary web script or HTML via the page parameter to the default URI for some directories, as demonstrated by 1 ActiveKB/ and 2 default/categories/ActiveKB/...

CVE-2007-5415

Cross-site scripting XSS vulnerability in Mozilla Firefox 2.0, when UTF-7 document content is rendered directly in UTF-7, allows remote attackers to inject arbitrary web script or HTML via a gopher URI that uses '/' slash characters to delimit a literal string within an XSS sequence, a related...

CVE-2007-5370

Multiple cross-site scripting XSS vulnerabilities in cgi-bin/dnewsweb.exe in NetWin DNewsWeb DNews News Server 57e1 allow remote attackers to inject arbitrary web script or HTML via the 1 group or 2 utag parameter...

CVE-2007-5312

Cross-site scripting XSS vulnerability in TorrentTrader Classic 1.07 allows remote attackers to inject arbitrary web script or HTML via the 1 color parameter to pjirc/css.php and the 2 cat parameter to browse.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in a Wikepage Opus 13 2007.2 and b TipiWiki 2 allow remote attackers to inject arbitrary web script or HTML via the 1 PageContent and 2 PageName parameters...