66 matches found
CVE-2006-2282
Cross-site scripting XSS vulnerability in X7 Chat 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the URL of an avatar, possibly related to the avatar parameter in register.php...
CVE-2006-2282
The CVE-2006-2282 entry describes an XSS vulnerability in X7 Chat 2.0.2 and earlier where a crafted javascript: URI in the avatar URL (likely related to the avatar parameter in register.php) allows remote attackers to inject arbitrary web script or HTML. Public details include a CVSS v2 base scor...
CVE-2004-2282
DansGuardian prior to 2.7.7-2 is affected. The vulnerability allows remote attackers to bypass URL filters by using a ".." sequence in the request, exploiting the URL-filtering logic. The affected software is DansGuardian; no explicit exploit code or in‑the‑wild exploit details are provided in th...
CVE-2005-2282
WebEOC (before 6.0.2) contains multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary script/HTML via unknown vectors. The issue is addressed in version 6.0.2, which adds validation checks to vulnerable input fields. The CVE references come from multip...
WebEOC is vulnerable to cross-site scripting attacks
Overview WebEOC contains multiple cross-site scripting vulnerabilities that may allow a remote attacker to inject and execute arbitrary script using a vulnerable WebEOC site. Description WebEOC is a web-based crisis information management application that provides functions to gather, coordinate,...
