7978 matches found
CVE-2008-2248: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Outlook Web Access OWA for Exchange Server 2003 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified HTML, a different vulnerability than CVE-2008-2247...
CVE-2008-3028
Multiple cross-site scripting XSS vulnerabilities in the Send-A-Card srsendcard extension 2.2.2 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-3029
Cross-site scripting XSS vulnerability in the WEC Discussion Forum wecdiscussion extension 1.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-3023
Cross-site scripting XSS vulnerability in FreeStyle Wiki 3.6.2 and earlier, and 3.6.3 dev3 and earlier development versions, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2005-1799...
CVE-2008-3023
Cross-site scripting XSS vulnerability in FreeStyle Wiki 3.6.2 and earlier, and 3.6.3 dev3 and earlier development versions, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2005-1799...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to inject arbitrary web script or HTML via the 1 annuaire parameter to a lastrecords.php and b annuaire.php and the 2 by and 3 catid parameters to annuaire.php...
Cross site scripting
Cross-site scripting XSS vulnerability in backend/umleitung.php in CMReams CMS 1.3.1.1 Beta 2 allows remote attackers to inject arbitrary web script or HTML via the langberedtext parameter...
CVE-2008-2979
Multiple cross-site scripting XSS vulnerabilities in phpi/login.php in Ourvideo CMS 9.5 allow remote attackers to inject arbitrary web script or HTML via the 1 toppage and 2 endpage parameters...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Academic Web Tools AWT YEKTA 1.4.3.1, and 1.4.2.8 and earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 query string to login.php and the 2 glbsid parameter to hta/htmlarea.js.php, and allow remote authenticated...
Cross site scripting
Cross-site scripting XSS vulnerability in viewforum.php in JaxUltraBB JUBB 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the forum parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in admin/objects/objimage.php in TinX/cms 1.1 allows remote attackers to inject arbitrary web script or HTML via the language parameter...
CVE-2008-2979
Multiple cross-site scripting XSS vulnerabilities in phpi/login.php in Ourvideo CMS 9.5 allow remote attackers to inject arbitrary web script or HTML via the 1 toppage and 2 endpage parameters...
CVE-2008-2980
Multiple cross-site scripting XSS vulnerabilities in HomePH Design 2.10 RC2 allow remote attackers to inject arbitrary web script or HTML via the 1 errormeldung parameter to admin/features/register/register.php, the 2 featurelanguageueberschrift parameter to...
CVE-2008-2871
Multiple cross-site scripting XSS vulnerabilities in template2.php in PEGames allow remote attackers to inject arbitrary web script or HTML via the 1 sitetitle, 2 sitenav, 3 sitemain, and 4 sitealt parameters. NOTE: the provenance of this information is unknown; the details are obtained solely fr...
Cross site scripting
Cross-site scripting XSS vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in eLineStudio Site Composer ESC 2.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 topic and 2 button parameters to ansFAQ.asp and the 3 id and 4 txtEmail parameters to login.asp...
CVE-2008-2855
Cross-site scripting XSS vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2008-2825
Cross-site scripting XSS vulnerability in the embedded Web Server in Xerox WorkCentre M123, M128, and 133 and WorkCentre Pro 123, 128, and 133 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the redirection parameter...