Cross site scripting

Cross-site scripting XSS vulnerability in Webasyst Shop-Script 5.2.2.30933 allows remote attackers to inject arbitrary web script or HTML via the phone number field in a new contact to phpecom/index.php/webasyst/contacts/...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in dotProject before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via the 1 callback parameter in a colorselector action, 2 field parameter in a dateformat action, or 3 companyname parameter in an addedit action to index.php...

PT-2014-8502

Name of the Vulnerable Software and Affected Versions Marketo MA module versions prior to 7.x-1.5 for Drupal Description The issue allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to field titles in the 1 Webform or 2 User...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Xornic Contact Us allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 email parameter to contact.php or 3 PATHINFO to setup.php, related to the "PHPSELF" variable...

CVE-2014-5026

Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.8b allow remote authenticated users with console access to inject arbitrary web script or HTML via a 1 Graph Tree Title in a delete or 2 edit action; 3 CDEF Name, 4 Data Input Method Name, or 5 Host Templates Name in a delete action; ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.8b allow remote authenticated users with console access to inject arbitrary web script or HTML via a 1 Graph Tree Title in a delete or 2 edit action; 3 CDEF Name, 4 Data Input Method Name, or 5 Host Templates Name in a delete action; ...

CVE-2014-5169

Cross-site scripting XSS vulnerability in the Date module before 7.x-2.8 for Drupal allows remote authenticated users with the permission to create a date field to inject arbitrary web script or HTML via the date field title...

CVE-2014-5025

Cross-site scripting XSS vulnerability in datasources.php in Cacti 0.8.8b allows remote authenticated users with console access to inject arbitrary web script or HTML via the namecache parameter in a dsedit action...

Cross site scripting

Cross-site scripting XSS vulnerability in sshandler.php in the WordPress Spreadsheet wpSS plugin 0.62 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ssid parameter...

CVE-2014-5025

Cross-site scripting XSS vulnerability in datasources.php in Cacti 0.8.8b allows remote authenticated users with console access to inject arbitrary web script or HTML via the namecache parameter in a dsedit action...

CVE-2014-5169

Cross-site scripting XSS vulnerability in the Date module before 7.x-2.8 for Drupal allows remote authenticated users with the permission to create a date field to inject arbitrary web script or HTML via the date field title...

CVE-2012-5866

Cross-site scripting XSS vulnerability in include.php in Achievo 1.4.5 allows remote attackers to inject arbitrary web script or HTML via the field parameter...

CVE-2012-5866

Cross-site scripting XSS vulnerability in include.php in Achievo 1.4.5 allows remote attackers to inject arbitrary web script or HTML via the field parameter...

CVE-2014-6280

Multiple cross-site scripting XSS vulnerabilities in OSClass before 3.4.2 allow remote attackers to inject arbitrary web script or HTML via the 1 action or 2 nsextt parameter to oc-admin/index.php or the 3 nsextt parameter in an itemsreported action to oc-admin/index.php...

CVE-2014-5330

Cross-site scripting XSS vulnerability in BirdBlog allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-3408

Cisco Prime Optical 10’s web framework is affected by CVE-2014-3408, a reflected XSS in the web framework via an unspecified parameter (Bug ID CSCuq80763). The NVD entry lists a CVSSv2 base score of 6.8 (Network, medium complexity, no auth, partial impacts). Cisco’s advisory states that software ...

CVE-2014-5331: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Aflax allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-6154

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.2 through 3.3 before 3.3.0.2 IBM TRIRIGA Application Platform version 3.3.1 before 3.3.1.3 IBM TRIRIGA Application Platform version 3.3.2 before 3.3.2.2 IBM TRIRIGA Application Platform version 3.4...

PT-2014-6413

Name of the Vulnerable Software and Affected Versions BirdBlog affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors...

PT-2014-6414

Name of the Vulnerable Software and Affected Versions Aflax affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors...