CVE-2008-3397

CVE-2008-3397 affects Runesoft Cerberus CMS up to version 3_1.4_0.9. It is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary script/HTML via the cerberus_user cookie. Impact is limited to the attacker’s ability to execute scripts in the victim’s browser; no explic...

CVE-2007-3397

The web container in IBM WebSphere Application Server WAS before 6.0.2.21, and 6.1.x before 6.1.0.9, sends response data intended for a different request in certain circumstances after a closed connection error, which might allow remote attackers to obtain sensitive information...

CVE-2007-3397

The CVE affects IBM WebSphere Application Server (WAS) web container: versions < 6.0.2.21 (6.0 line) and

CVE-2006-3397

Taskjitsu (CVE-2006-3397) has a cross-site scripting vulnerability affecting versions before 2.0.1. The flaw allows remote attackers to inject arbitrary web script or HTML through multiple parameters when creating a task, notably the title and description fields. The PT-2006-4289 entry confirms t...

CVE-2006-3397

Multiple cross-site scripting XSS vulnerabilities in Taskjitsu before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, including the 1 title and 2 description parameters when creating a task...

Invision Power Board Dragoran Forum < 1.4 index.php site Parameter SQL Injection

Binary data 3397.prm...

CVE-2005-3397

Cross-site scripting XSS vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script or HTML via the error parameter to comersusbackofficesupportError.asp. NOTE: the comersusbackofficemessage.asp/message vector is already covered by CVE-2005-2191 item 2...

CVE-2005-3397

CVE-2005-3397 describes a cross-site scripting (XSS) vulnerability in the Comersus BackOffice. The issue is exploitable via the error parameter to the script comersus_backoffice_supportError.asp , allowing remote attackers to inject arbitrary web script or HTML. The description notes that the rel...