CVE-2008-3712

Multiple cross-site scripting XSS vulnerabilities in Mambo 4.6.2 and 4.6.5, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 query string to mambots/editors/mostlyce/jscripts/tinymce/filemanager/connectors/php/connector.php and the 2...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Kayako SupportSuite 3.20.02 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the sessionid parameter in a livesupport startclientchat action to visitor/index.php; 2 the filter parameter in a news view action to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in IDevSpot PhpLinkExchange 1.01 allow remote attackers to inject arbitrary web script or HTML via the catid parameter in a 1 useradd, 2 recip, 3 tellafriend, or 4 contact action, or 5 in a request without an action; or 6 the id...

CVE-2008-3678

Cross-site scripting XSS vulnerability in admin/searchlinks.php in Freeway before 1.4.2.197 allows remote attackers to inject arbitrary web script or HTML via the URL...

CVE-2008-3678

Cross-site scripting XSS vulnerability in admin/searchlinks.php in Freeway before 1.4.2.197 allows remote attackers to inject arbitrary web script or HTML via the URL...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in files generated by Adobe Presenter 6 and 7 before 7.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving 1 viewer.swf and 2 loadflash.js, a different vulnerability than CVE-2008-3516...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in files generated by Adobe Presenter 6 and 7 before 7.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving 1 viewer.swf and 2 loadflash.js, a different vulnerability than CVE-2008-3515...

CVE-2008-3516

Multiple cross-site scripting XSS vulnerabilities in files generated by Adobe Presenter 6 and 7 before 7.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving 1 viewer.swf and 2 loadflash.js, a different vulnerability than CVE-2008-3515...

CVE-2008-3515

Multiple cross-site scripting XSS vulnerabilities in files generated by Adobe Presenter 6 and 7 before 7.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving 1 viewer.swf and 2 loadflash.js, a different vulnerability than CVE-2008-3516...

CVE-2008-3569

Multiple cross-site scripting XSS vulnerabilities in XAMPP 1.6.7, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the text parameter to 1 iart.php and 2 ming.php...

CVE-2008-3572

Cross-site scripting XSS vulnerability in index.php in Pligg 9.9.5 allows remote attackers to inject arbitrary web script or HTML via the category parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in ZoneO-soft freeForum 1.7 allows remote attackers to inject arbitrary web script or HTML via the acuparam parameter to 1 the default URI or 2 index.php, or 3 the PATHINFO to index.php. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-3565

Multiple cross-site scripting XSS vulnerabilities in Meeting Room Booking System MRBS 1.2.6 allow remote attackers to inject arbitrary web script or HTML via the area parameter to 1 day.php, 2 week.php, 3 month.php, 4 search.php, 5 report.php, and 6 help.php. NOTE: the provenance of this...

CVE-2008-3574

Multiple cross-site scripting XSS vulnerabilities in Pluck 4.5.2, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 langfooter parameter to a data/inc/footer.php; the 2 pluckversion, 3 langinstall22, 4 titelkop, 5 langkop1, 6 langkop2, 7...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in KAPhotoservice allow remote attackers to inject arbitrary web script or HTML via the 1 filename parameter to search.asp and the 2 page parameter to order.asp. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2008-2939

Cross-site scripting XSS vulnerability in proxyftp.c in the modproxyftp module in Apache 2.0.63 and earlier, and modproxyftp.c in the modproxyftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory...

Cross site scripting

Cross-site scripting XSS vulnerability in proxyftp.c in the modproxyftp module in Apache 2.0.63 and earlier, and modproxyftp.c in the modproxyftp module in Apache 2.2.9 and earlier 2.2 versions, allows remote attackers to inject arbitrary web script or HTML via a wildcard in the last directory...

CVE-2008-3483

Cross-site scripting XSS vulnerability in ScrewTurn Wiki 2.0.29 and 2.0.30 allows remote attackers to inject arbitrary web script or HTML via error messages in the "/admin.aspx - System Log" page...

CVE-2008-3422

Multiple cross-site scripting XSS vulnerabilities in the ASP.net class libraries in Mono 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted attributes related to 1 HtmlControl.cs PreProcessRelativeReference, 2 HtmlForm.cs RenderAttributes, 3 HtmlInputButton...

CVE-2008-3398

Multiple cross-site scripting XSS vulnerabilities in XRMS CRM 1.99.2 allow remote attackers to inject arbitrary web script or HTML via the msg parameter to unspecified components, possibly including login.php. NOTE: this may overlap CVE-2008-1129...