85 matches found
CVE-2008-2901
CVE-2008-2901 affects Haudenschilt Family Connections CMS (FCMS) 1.4. Multiple SQL injection vulnerabilities exist that allow remote authenticated users to execute arbitrary SQL commands via (1) address parameter to addressbook.php, (2) getnews parameter to familynews.php, and (3) poll_id paramet...
CVE-2007-2901
Multiple cross-site scripting XSS vulnerabilities in Dokeos 1.8.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the img parameter to main/inc/lib/fckeditor/editor/plugins/ImageManager/editor.php and other unspecified vectors...
CVE-2007-2901
CVE-2007-2901: Affected software is Dokeos 1.8.0 and earlier. The vulnerability is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via the img parameter to main/inc/lib/fckeditor/editor/plugins/ImageManager/editor.php and other unspecif...
CVE-2005-2901
Multiple Cross-site scripting XSS vulnerabilities in CjWeb2Mail 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 message, or 3 ip parameter to thankyou.php or 4 emsg parameter to web2mail.php...
CVE-2005-2901
CVE-2005-2901 affects CjWeb2Mail 3.0. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via the following parameters: (1) name, (2) message, or (3) ip to thankyou.php, and (4) emsg to web2mail.php. The do...