Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Virtual Design Studio vlbook 1.21 allows remote attackers to inject arbitrary web script or HTML via the l parameter, a different vector than CVE-2006-3260...

CVE-2007-3260

HP System Management Homepage SMH before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges...

CVE-2007-3260

The CVE-2007-3260 issue affects HP System Management Homepage (SMH) for Linux prior to version 2.1.9 when used with Novell eDirectory. The vulnerability arises from a misconfiguration where eDirectory members are assigned to the root group, enabling remote authenticated eDirectory users to gain p...

CVE-2006-3260

CVE-2006-3260 affects vlbook 1.02. The vulnerability is a Cross-site scripting (XSS) flaw in index.php that allows remote attackers to inject arbitrary web script or HTML via the message parameter. No remediation details are provided in the supplied documents; exploitation information is not pres...

CVE-2005-3260

CVE-2005-3260 describes multiple XSS flaws in versatileBulletinBoard (vBB) 1.0.0 RC2. The vulnerabilities allow remote attackers to inject arbitrary script/HTML via the url parameter in dereferrer.php and the file parameter in imagewin.php. The NVD entry lists a MEDIUM base score (CVSS2: AV:N/AC:...