104 matches found
CVE-2007-4165
Cross-site scripting XSS vulnerability in index.php in the Blue Memories theme 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757 and CVE-2007-4014. NOTE: the provenance of this information is unknown; th...
CVE-2006-4165
Cross-site scripting XSS vulnerability in NetCommons 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2006-4165
NetCommons 1.0.8 and earlier contain an XSS vulnerability (CVE-2006-4165). The connected JVN entry confirms an arbitrary script/HTML execution via unspecified vectors, with impact described as remote script execution in the user’s browser. The JVN notes no remediation currently listed (Solution: ...
CVE-2005-4165
CVE-2005-4165 affects ASP-DEV ASP Resources Forum. The vulnerability allows remote SQL injection through (1) forum_id in forum.asp, (2) unspecified params in register.asp, and (3) the Search For field in search.asp, enabling arbitrary SQL execution. The NVD notes a base score of 7.5 (HIGH) with n...