CVE-2008-3397

Cross-site scripting XSS vulnerability in Runesoft Cerberus CMS before 31.40.9 allows remote attackers to inject arbitrary web script or HTML via a cerberususer cookie...

Cross site scripting

Cross-site scripting XSS vulnerability in RTEpopuplink.asp in Web Wiz Rich Text Editor RTE 3.x and 4.x before 4.03 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in Snark VisualPic 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the pic parameter to the default URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-3367

Cross-site scripting XSS vulnerability in RTEpopuplink.asp in Web Wiz Rich Text Editor RTE 3.x and 4.x before 4.03 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

CVE-2008-3340

Cross-site scripting XSS vulnerability in searchresult.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable possibly the opt parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in searchresult.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HTML via the searchFor variable possibly the opt parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edpNews action...

CVE-2008-3344

Multiple cross-site scripting XSS vulnerabilities in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition tr and 3.10a allow remote attackers to inject arbitrary web script or HTML via the 1 ResultHtml, 2 dir, 3 SenderName, 4 RecipientName, 5 SenderMail, and 6 RecipientMail...

CVE-2008-3331

Cross-site scripting XSS vulnerability in returndynamicfilters.php in Mantis before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the filtertarget parameter...

CVE-2008-3331

Cross-site scripting XSS vulnerability in returndynamicfilters.php in Mantis before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the filtertarget parameter...

CVE-2008-3326

Cross-site scripting XSS vulnerability in blog/edit.php in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to inject arbitrary web script or HTML via the etitle parameter blog entry title...

Cross site scripting

Cross-site scripting XSS vulnerability in mensaje.php in C. Desseno YouTube Blog ytb 0.1 allows remote attackers to inject arbitrary web script or HTML via the m parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in modules/system/admin.php in XOOPS 2.0.18.1 allows remote attackers to inject arbitrary web script or HTML via the fct parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-3260

Multiple cross-site scripting XSS vulnerabilities in Claroline before 1.8.10 allow remote attackers to inject arbitrary web script or HTML via 1 the cwd parameter in a rqMkHtml action to document/rqmkhtml.php, or the query string to 2 announcements/announcements.php, 3 calendar/agenda.php, 4...

Cross site scripting

Cross-site scripting XSS vulnerability in LunarNight Laboratory WebProxy 1.7.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3255

Cross-site scripting XSS vulnerability in LunarNight Laboratory WebProxy 1.7.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the XenAPI HTTP interfaces in Citrix XenServer Express, Standard, and Enterprise Edition 4.1.0; Citrix XenServer Dell Edition Express and Enterprise 4.1.0; and HP integrated Citrix XenServer Select and Enterprise 4.1.0 allows remote attackers to inject...

CVE-2008-3255

Cross-site scripting XSS vulnerability in LunarNight Laboratory WebProxy 1.7.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Drupal 6.x before 6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 free tagging taxonomy terms, which are not properly handled on node preview pages, and 2 unspecified OpenID values...

Cross site scripting

Cross-site scripting XSS vulnerability in WordPress before 2.6, SVN development versions only, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...