204 matches found
CVE-2002-1729
CVE-2002-1729 describes a cross-site scripting (XSS) vulnerability in ASPjar Guestbook 1.00. The flaw occurs in the guestbook message handling when the user-supplied parameter (the "web site" field) is not properly sanitized, allowing remote attackers to execute arbitrary script as other users. D...
CVE-2005-1729
Affected product: Novell eDirectory 8.7.3. Vulnerability: Denial of service caused by insufficient filtering of HTTP requests that use reserved MS-DOS device names (e.g., AUX, CON, PRN, COM1, LPT1). Impact: Remote attacker can terminate the eDirectory server process; all services (including LDAP)...
CVE-2004-1729
Nihuo Web Log Analyzer 1.6 is affected by a cross-site scripting (XSS) vulnerability that can be triggered via the User-Agent HTTP header, potentially allowing an attacker to inject arbitrary scripts or HTML. The issue is documented across CVE/NVD entries with the same vector and impact (I: PARTI...
