CVE-2013-4746: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the My quiz and poll myquizpoll extension before 2.0.6 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in data/class/pages/products/LCPageProductsList.php in LOCKON EC-CUBE 2.11.0 through 2.12.4 allows remote attackers to inject arbitrary web script or HTML via vectors involving the classcategoryid2 field, a different vulnerability than CVE-2013-3653...

Cross site scripting

Cross-site scripting XSS vulnerability in the Fonecta verify module 7.x-1.x before 7.x-1.6 for Drupal allows remote attackers from certain sources to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-6575

Cross-site scripting XSS vulnerability in the Exposed Filter Data module 6.x-1.x before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-6576

Cross-site scripting XSS vulnerability in the PRH Search module 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers from certain sources to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-2029

Name of the Vulnerable Software and Affected Versions Drupal Exposed Filter Data module versions 6.x-1.x through 6.x-1.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions 6.x-1.x through 6.x-1.1, update to...

PT-2013-2028

Name of the Vulnerable Software and Affected Versions Fonecta verify module versions 7.x-1.x through 7.x-1.5 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions 7.x-1.x through...

CVE-2013-3396

Cross-site scripting XSS vulnerability in the web framework in Cisco Content Security Management on Security Management Appliance SMA devices allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuh24749...

CVE-2013-3396

Cross-site scripting XSS vulnerability in the web framework in Cisco Content Security Management on Security Management Appliance SMA devices allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuh24749...

PT-2013-4353

Name of the Vulnerable Software and Affected Versions Cisco Content Security Management on Security Management Appliance SMA devices affected versions not specified Description A cross-site scripting XSS issue exists in the web framework of Cisco Content Security Management on Security Management...

CVE-2013-1971

Cross-site scripting XSS vulnerability in the MP3 Player module for Drupal 6.x allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the file name of a MP3 file...

CVE-2013-2129

The CVE-2013-2129 issue affects the Drupal Webform module (6.x-3.x) prior to 6.x-3.19. It is a Cross-site Scripting (XSS) vulnerability whereby remote authenticated users with the "edit own webform content" or "edit all webform content" permissions can inject arbitrary web script or HTML via a co...

CVE-2013-0548

Multiple cross-site scripting XSS vulnerabilities in the Basic Services component in IBM Tivoli Monitoring ITM 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business formerly Tivoli Foundations Application Manager 1.2.1...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Basic Services component in IBM Tivoli Monitoring ITM 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business formerly Tivoli Foundations Application Manager 1.2.1...

CVE-2013-1905

Cross-site scripting XSS vulnerability in the Zero Point theme 7.x-1.x before 7.x-1.9 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-3128

Name of the Vulnerable Software and Affected Versions Drupal CurvyCorners module versions 6.x-1.x through 7.x-1.x Description A cross-site scripting XSS issue exists, allowing remote authenticated users with the administer curvycorners permission to inject arbitrary web script or HTML...

Cross site scripting

Cross-site scripting XSS vulnerability in REDCap before 4.14.3 allows remote authenticated users to inject arbitrary web script or HTML via uppercase characters in JavaScript events within user-defined labels...

Cross site scripting

Cross-site scripting XSS vulnerability in a ZCC page in njwc.jar in Novell ZENworks Configuration Management ZCM 11.2 before 11.2.3a Monthly Update 1 allows remote attackers to inject arbitrary web script or HTML via vectors involving an onload event...

CVE-2012-6564

Cross-site scripting XSS vulnerability in REDCap before 4.14.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-5094

Name of the Vulnerable Software and Affected Versions REDCap versions prior to 5.1.0 Description The issue involves multiple cross-site scripting XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML. The vulnerabilities are related to unspecified vectors involvin...